Transportation security reports

F

FlixBus Україна

flixbus.ua

10

FlixBus Україна operates as a major intercity bus transportation provider offering extensive routes across Ukraine and Europe. The website serves as a digital platform for ticket booking, trip planning, and real-time tracking, targeting general consumers seeking affordable and convenient bus travel. The company is part of the larger Flix SE group, with subsidiaries including FlixTrain and Greyhound, indicating a strong market position in transportation. Technically, the website employs modern frameworks such as React and Honeycomb UI, uses CDN hosting via Cloudfront, and integrates multiple analytics and marketing tools with user consent management. Security posture is strong with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, accessible, and trustworthy with good privacy compliance.

F

FlixBus UK

flixbus.co.uk

47

FlixBus UK operates as a major intercity coach travel provider offering affordable and extensive bus services across the UK and Europe. The company leverages a large network connecting thousands of destinations with modern amenities such as free Wi-Fi and real-time trip tracking. Their business model focuses on digital ticketing and app-based booking, targeting general consumers seeking cost-effective and sustainable travel options. The website reflects a mature, well-established brand with consistent branding and professional content. Technically, the website employs modern web technologies including React, Honeycomb UI framework, and cloud-based CDN hosting via AWS Cloudfront. It integrates multiple analytics and marketing tools such as Google Tag Manager, Datadog RUM, and Usercentrics for GDPR compliance. The site is mobile-optimized, accessible, and performs well with fast load times and good SEO practices. From a security perspective, the site enforces HTTPS and uses consent management platforms to comply with privacy regulations. While explicit security headers are not fully enumerated, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit incident response or security policy pages suggests room for improvement in transparency. Overall, the website is trustworthy, professional, and well-aligned with the company's business goals. The lack of WHOIS data for the www subdomain is explained by UK domain registration rules and does not detract from legitimacy. Strategic recommendations include enhancing visible security policies, verifying all security headers, and expanding contact information for improved user trust.

F

Flix SE

flixbus.be

10

FlixBus is a major European transportation company specializing in affordable intercity bus travel across more than 40 countries and 3,000 destinations. The website provides comprehensive information about their services, including online ticket booking, real-time bus tracking, and onboard amenities such as Wi-Fi and power outlets. The company positions itself as a leader in the European bus travel market with a strong brand presence and extensive network. Technically, the website is built on a modern Drupal CMS platform, leveraging multiple third-party services for analytics, marketing, and performance optimization, including Google Tag Manager, Datadog RUM, Snowplow Analytics, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times supported by CDN infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and uses a consent management platform to comply with privacy regulations. However, explicit security policies, incident response contacts, and vulnerability disclosure programs are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable due to registry restrictions. The domain's privacy protection is justified given the business type. The site demonstrates a mature digital presence with extensive tracking and marketing tools, balanced by strong privacy controls.

F

FlixBus Österreich

flixbus.at

61

FlixBus Österreich operates as a major intercity bus transportation provider in Austria and across Europe, offering affordable and sustainable travel options. The company is part of Flix SE, a large transportation group with subsidiaries including FlixTrain and Greyhound. The website is professionally designed, multilingual, and provides comprehensive travel information and booking capabilities via a dedicated shop subdomain. The technical infrastructure leverages modern web technologies, CDNs, and advanced analytics tools, ensuring fast performance and good user experience across devices. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies are not prominently published. Overall, the site reflects a mature digital presence aligned with a reputable transportation business.

F

Flix SE

flixbus.al

56

Flix SE operates the www.flixbus.al website, providing affordable and eco-friendly intercity bus travel services across Europe, targeting Albanian-speaking customers. The company is a major player in the European transportation sector, offering extensive routes and modern amenities. The website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital infrastructure. Technically, the site uses Drupal CMS, integrates multiple analytics and marketing tools, and employs strong security practices including HTTPS and security headers. Privacy compliance is robust with clear policies and consent management. However, direct contact information and explicit security policies are not prominently available. Overall, the site demonstrates a strong security posture and business credibility with no critical vulnerabilities detected.

Ostprignitz-Ruppiner Personennahverkehrsgesellschaft mbH operates as a regional public transportation company in Germany, providing bus services, ticketing options, and mobility support primarily for residents and commuters within the Ostprignitz-Ruppin region. The website offers comprehensive timetable information, ticket purchase options, and details about special services such as Rufbus, bus rental, and advertising. The company targets local users seeking reliable and accessible public transport solutions. Technically, the website is built on a modern stack including Bootstrap 4.3.1, jQuery, Font Awesome, and Moment.js, ensuring responsive design and usability across devices. Forms on the site submit data securely to trusted external domains, indicating integration with regional transport information systems. While performance is moderate, the site is well-structured and navigable, with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are recommended for enhanced protection and transparency. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is implemented. Overall, the site demonstrates a solid security posture but could improve in compliance and security best practices. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response contacts, and auditing third-party libraries regularly. These steps will enhance trust, compliance, and security resilience for the company and its users.

N

NEB - Die Niederbarnimer Eisenbahn

neb.de

54

NEB - Die Niederbarnimer Eisenbahn operates as a regional railway service provider in the Brandenburg and Berlin area, offering passenger transport, ticketing, and travel information services. The website is well-structured, professionally designed, and targets regional commuters and travelers. It provides detailed information about train lines, tickets, excursions, and service updates. The digital infrastructure is based on TYPO3 CMS, enhanced with modern web technologies and accessibility features, ensuring a good user experience across devices. The website employs Cookiebot for cookie consent management and integrates Google Analytics for traffic analysis, reflecting a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and Cloudflare DNS usage, although some security headers could be improved. Overall, the website is trustworthy, professional, and compliant with relevant privacy regulations, though explicit privacy policy and terms of service pages were not detected in the provided content.

V

VBB Verkehrsverbund Berlin-Brandenburg GmbH

vbb.de

50

VBB Verkehrsverbund Berlin-Brandenburg GmbH operates as the regional public transportation association for Berlin and Brandenburg, providing comprehensive services including transport planning, ticketing, quality management, and digital journey planning. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting a broad audience including daily commuters and travelers in the region. The company holds a leading market position in regional transportation with a large operational scale. Technically, the site is built on TYPO3 CMS, integrates Matomo analytics for privacy-conscious tracking, and employs Cookiebot for cookie consent management, demonstrating compliance with GDPR and modern web standards. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and aligned with the business's public service mission.

B

BMW i Ventures, Inc.

bmwiventures.com

53

BMW i Ventures, Inc. is a corporate venture capital firm operating as part of the BMW Group, focusing on investments in innovative companies within the automotive, manufacturing, energy storage, and digital sales sectors. The firm leverages BMW's corporate resources while maintaining the agility and rigor of a Silicon Valley VC, managing over $800 million in assets and a portfolio of more than 80 companies since its founding in 2011. The website reflects a professional and modern digital presence, showcasing portfolio companies, testimonials, and corporate contact information across multiple global offices. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including Google Fonts, jQuery, and Finsweet attributes for enhanced UI/UX features. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices evident in meta tags and structured content. However, there is a lack of visible privacy and cookie policies, and no explicit security or incident response information is provided. From a security perspective, the site enforces HTTPS and uses secure forms but lacks advanced security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data for the domain is missing or unregistered, which raises concerns about domain legitimacy and consistency with the business's claimed history. Overall, BMW i Ventures presents a credible and professional business front with strong digital maturity but should address privacy compliance and domain registration transparency to enhance trust and security posture.

F

FlixBus USA

flixbus.com

58

FlixBus USA operates as a major intercity bus transportation provider offering extensive routes across the United States and internationally. The company leverages a modern digital platform to provide convenient ticket booking, real-time trip tracking, and onboard amenities such as Wi-Fi and power outlets. Their market position is strong, supported by partnerships with Greyhound and FlixTrain, and a large user base exceeding 90 million travelers. The website reflects a mature digital presence with excellent content quality and user experience. Technically, the website is built on modern frameworks including React and Drupal CMS, hosted on Amazon Cloudfront CDN, and integrates advanced analytics and consent management tools. The site is mobile-optimized, accessible, and SEO-friendly, ensuring broad reach and usability. Security posture is robust with HTTPS enforcement and use of consent platforms, though explicit security headers and incident response information are not publicly detailed. The WHOIS data for the domain is unavailable, which is unusual for a large established brand and may indicate privacy protection or registrar policies. Despite this, the website's professional design, extensive content, and trusted partnerships support its legitimacy. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, FlixBus USA presents a secure, professional, and user-friendly platform for bus travel services. Strategic recommendations include enhancing transparency around security policies and incident response, confirming security headers, and providing clear contact information to further strengthen trust and compliance.

E

EIT Urban Mobility

eiturbanmobility.eu

65

EIT Urban Mobility is a prominent European innovation community focused on transforming urban mobility towards sustainability and decarbonisation. The organization supports a broad ecosystem including startups, public administrations, academia, and industry partners to accelerate innovation and market deployment of mobility solutions. Their services encompass education, startup acceleration, innovation commercialization, and stakeholder matchmaking, positioning them as a key player in the European urban mobility sector. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern analytics and marketing tools while maintaining good performance and accessibility standards. Security posture is strong with HTTPS, cookie consent, and reCAPTCHA protections, though some security headers could be improved. The absence of public WHOIS data is due to EURid privacy policies, but the website's professional presentation and EU affiliations indicate high legitimacy. Overall, the site is well-structured, trustworthy, and compliant with privacy regulations.

H

Hagmann Umzüge GmbH

hagmann-umzug.com

37

Hagmann Umzüge GmbH is a well-established moving and logistics company based in Ulm, Germany, founded in 2000. The company offers a broad range of services including private and corporate relocations, transport, storage solutions, and specialized moving services such as high-tech and international moves. Their market position is regional with a focus on quality service for both private individuals and businesses. The website reflects a professional business model with clear service offerings and a consistent brand presence. Technically, the website employs modern tracking and consent management technologies such as Cookiebot, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a mature digital infrastructure. The site is hosted by IONOS SE, a reputable provider, and uses HTTPS with a clientTransferProhibited domain status, enhancing security. Mobile optimization and SEO practices are good, though accessibility could be improved. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent compliance. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent with the business history, supporting legitimacy. Overall, the website is secure, compliant with GDPR, and professionally maintained, with minor recommendations to enhance DNS security and publish explicit security policies. The risk profile is low, and the company appears trustworthy and credible in its sector.

A

Amcrest

amcrestgps.net

57

Amcrest GPS Pro is a medium-sized business specializing in GPS tracking services and device sales, targeting vehicle owners and fleet managers. The website offers activation and purchase options for GPS and OBD devices and provides mobile applications for iOS and Android platforms. Technically, the site is built on modern frameworks such as Angular and Bootstrap, with integration of Google Maps API and analytics tools like Microsoft Clarity and Google Analytics. The site is hosted with reputable providers and uses HTTPS, but lacks visible security headers and privacy policies, which are critical for compliance and trust. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the site is functional and moderately professional but would benefit from enhanced privacy compliance and security best practices.

R

Racines-Giovo

racines-giovo.it

48

Racines-Giovo operates as a regional ski resort in Italy, offering modern ski lifts, cable cars, and a variety of winter sports and tourism services. The website targets tourists, families, and winter sports enthusiasts, providing live updates on ski lifts, weather, and related activities. The business is positioned as a medium-sized player in the transportation and hospitality sectors within the alpine tourism market. Technically, the site uses a modern CMS (Consisto), integrates Google Analytics and Tag Manager for tracking, and employs a comprehensive cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and safe for general audiences.

R

RideBee

stuttgart-faehrt-mit.de

48

The website "Stuttgart fährt mit" is a German-language platform focused on facilitating carpooling and ride-sharing for commuters in Stuttgart. It targets employees of companies, universities, hospitals, and event attendees, offering a sustainable and cost-effective alternative to solo commuting. The platform is supported by the German Federal Ministry for Digital and Transport (BMDV), enhancing its credibility and market position. Key services include ride matching, chat functionality, calendar integration, and digital payment options. The business model is based on cooperation agreements with companies, providing the service free to end users. Technically, the site is a modern Angular 13 single-page application, hosted with Google Domains DNS, and integrates analytics tools such as Google Tag Manager and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be improved. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive, including email, phone, physical address, and a contact form. Overall, the site is trustworthy and professionally maintained, with room for enhancements in privacy and security transparency.

L

LimoBee

limobee.com

53

LimoBee is a German-based digital platform specializing in chauffeur and limousine transport services. The company offers a native app and web platform enabling passengers to book transfer rides with professional limousine services across multiple German cities. Their business model focuses on streamlining the booking, offer acceptance, payment, and management processes for both passengers and service providers. The website reflects a mature business with a domain registered since 2007 and a clear regional market presence. Technically, the site is built on Angular 14, leveraging modern web technologies and integrations such as Google Maps API and Hotjar for analytics and user experience insights. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in DNS security and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in the transportation sector in Germany.

A

Aisico

aisico.com

52

AISICO is an established Italian company specializing in road safety and crash test services, boasting over 30 years of experience. The company operates a unique European testing center dedicated to crash tests, supported by a skilled team and advanced laboratories. Their market position is strong within the transportation safety sector, offering a broad range of services including certification, infrastructure testing, and training. The website reflects a professional and comprehensive digital presence, supporting their leadership claims with detailed service descriptions and accreditations. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant privacy and cookie policies managed by Iubenda. Security posture is generally good with HTTPS enabled and consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, AISICO presents as a credible and professional organization with room for improvement in domain transparency and security hardening.

L

Luisl's Ski School

luisls-skischool.com

52

Luisl's Ski School is a regional ski instruction service based in Ratschings, South Tyrol, Italy, offering skiing and snowboarding lessons including group courses and private lessons. The website is professionally designed using Consisto CMS and integrates modern technologies such as Google Analytics, Google Tag Manager, and Avacy Consent Management for privacy compliance. The site demonstrates good mobile optimization and user experience with clear navigation and relevant content for its target audience of winter sports enthusiasts. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern, suggesting the need for further verification of domain registration and ownership to ensure legitimacy. Overall, the website is functional, privacy-aware, and business-focused but would benefit from enhanced transparency regarding domain registration and contact information.

The website 'Parken in Ulm' serves as an informational platform providing live updates on parking availability across multiple parking facilities in Ulm, Germany. It targets drivers and cyclists looking for parking options, offering real-time data, route guidance, and facility details. The business behind the site appears to be the Ulmer Parkbetriebs-GmbH, a local parking management entity. The site is well-branded, consistent, and provides clear contact information, enhancing its credibility. Technically, the site is built on the Odoo CMS platform and leverages modern web technologies including MapLibre GL for interactive maps and FontAwesome for icons. The site is mobile-optimized with good navigation and SEO practices. Hosting is managed via the d9t.de infrastructure, consistent with the domain's nameservers. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible HTTP security headers and a cookie consent mechanism, which are areas for improvement. No forms or data collection points are present on the main page, reducing immediate data exposure risks. No incident response or security policies are published, which could be enhanced to improve trust. Overall, the website is safe, professional, and trustworthy with a solid business focus on transportation services. Strategic improvements in privacy compliance and security headers would elevate its security posture and regulatory adherence.

B

BlaBlaCar

blablacar.de

11

BlaBlaCar is a leading European transportation platform specializing in ridesharing and long-distance bus travel. The website www.blablacar.de offers users a comprehensive and user-friendly interface to find and book affordable travel options across Europe, primarily targeting German-speaking customers. The platform emphasizes trust and safety through member verification and ratings, supported by modern identity verification technologies such as Onfido. The company maintains a strong digital presence with mobile apps and active social media channels. Technically, the site leverages modern web frameworks, cloud hosting, and integrates analytics and marketing tools to optimize user experience and business insights. Security posture is robust with HTTPS, CSP, and secure data handling practices, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business with a mature digital infrastructure.

R

RideBee

ridebee.com

10

RideBee is a German-based platform founded in 2012 that facilitates ride-sharing and sustainable commuting solutions primarily targeting commuters, companies, universities, and event organizers. The platform offers services including carpooling, bike-sharing, shuttle services, and features such as intelligent matching, digital payments, and in-app communication. The company positions itself as a niche player in the sustainable transportation sector within Germany, emphasizing environmental benefits and cost savings for users. Technically, the website is built on Angular 13 with integrations for Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the domain is secured with HTTPS, and domain registration is stable and consistent with the business history. However, the site lacks visible privacy and cookie policies, security.txt, and explicit contact information, which are areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

S

Ski School Ratschings

skischule-ratschings.com

52

Ski School Ratschings operates as a local ski and snowboard instruction service in the Ratschings region of Italy, targeting both children and adults. The website presents a professional and well-structured digital presence, offering private and group courses to enhance skiing skills. The business is positioned as a specialized service provider within the mountain cableways and winter sports sector, with a focus on customer experience and safety. Technically, the site uses modern web technologies including Google Analytics and Tag Manager, and complies with GDPR through a comprehensive cookie consent mechanism. Security posture is adequate with HTTPS enabled, though explicit security headers could be improved. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional appearance and content quality of the site. Overall, the site is trustworthy, user-friendly, and compliant with privacy standards, serving a niche market effectively.

G

Grupa Zdunek

zdunek.pl

54

Grupa Zdunek operates as a large automotive dealership group based in Poland, offering new and used vehicles across multiple brands. The website provides a comprehensive vehicle search and filtering experience, targeting consumers interested in purchasing cars. Technically, the site leverages modern JavaScript frameworks (likely Vue.js), integrates Google Tag Manager and reCAPTCHA for analytics and bot protection, and uses Cookiebot for cookie consent management. The site is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, HTTPS is enforced, but there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is basic, with cookie consent present but no explicit privacy policy or terms of service found. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.

K

KAYAK

kayak.fr

51

The analyzed website is a CAPTCHA verification page for the French domain of KAYAK, a well-known global travel metasearch engine. The page is designed to verify that visitors are legitimate users and not automated bots, employing Google reCAPTCHA Enterprise technology. Due to this security mechanism, the actual website content is inaccessible, limiting the ability to perform a full content and compliance analysis. KAYAK operates under Booking Holdings Inc., serving travelers seeking flights, hotels, and car rentals by aggregating offers from multiple providers. The domain WHOIS data is unavailable, which restricts verification of domain legitimacy and ownership details. The presence of advanced bot mitigation indicates a mature security posture, but the lack of visible privacy, cookie, or contact information on this page reduces transparency and user trust.

C

Consisto GmbH

ratschings-jaufen.it

53

The website www.ratschings-jaufen.it serves as a professional digital portal for the Ratschings-Jaufen ski area in Italy, offering comprehensive information about winter sports, mountain cableways, and related tourism services. The site targets winter tourists, families, and nature enthusiasts, positioning itself as a regional leader with modern infrastructure and a variety of winter activities. The business model revolves around tourism and transportation services in the mountain region, supported by partnerships with ski schools and local tourism entities. Technically, the site is built on the Consisto CMS platform, utilizing modern JavaScript libraries and Google Analytics for tracking. The design is responsive and user-friendly, with good SEO and accessibility practices, although some improvements are possible. Security-wise, the site enforces HTTPS, includes standard security headers, and implements cookie consent mechanisms, but lacks explicit published security policies or incident response contacts. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

T

Trenitalia

trenitalia.com

11

Trenitalia is the primary Italian national rail operator providing a wide range of train services including high-speed, intercity, and regional trains. The website serves as a comprehensive portal for ticket sales, travel information, loyalty programs, and additional travel-related services. It targets the general public and train travelers within Italy, positioning itself as a leading transportation service provider with a strong market presence supported by its parent company Ferrovie dello Stato Italiane and multiple subsidiaries. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and third-party analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate likely due to the extensive use of external scripts. From a security perspective, the site employs HTTPS and a strict Content-Security-Policy header, minimizing risks from cross-site scripting and other common web vulnerabilities. However, there is room for improvement by adding additional security headers and publishing a security.txt file to enhance vulnerability disclosure transparency. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Trenitalia's website is professional, trustworthy, and secure, reflecting its enterprise-level status and commitment to user experience and regulatory compliance. Strategic recommendations include enhancing security header coverage, improving incident response visibility, and maintaining vigilance on third-party script security.

M

Mooney

mooneygo.it

62

MooneyGo is a mobility service platform and app developed by Mooney in partnership with myCicero, targeting users in Italy for parking payments, public transport ticketing, telepedaggio, and other mobility-related services. The website is professionally designed, mobile-optimized, and provides clear information about its services, with a strong emphasis on user privacy and GDPR compliance. The technical infrastructure is based on WordPress with modern JavaScript libraries and integrates reputable analytics and advertising tools. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism. However, explicit contact information and security policies are not prominently available, which could be improved for enhanced trust and compliance.

M

myCicero srl

mycicero.eu

50

myCicero srl operates as the first Global Distribution System (GDS) for mobility services in Italy, providing a digital platform that integrates over 600 mobility operators. The company offers a suite of services including resale of mobility services, white-label app development, API integration, and back-office software solutions. Positioned as a pioneer in the Mobility as a Service (MaaS) sector, myCicero targets companies, public entities, and large organizations seeking to digitize and expand their mobility offerings. The website demonstrates a mature digital presence with professional design, clear navigation, and compliance with GDPR and cookie regulations via Iubenda. Technically, the site is built on WordPress with modern frameworks and includes security features such as HTTPS and Google reCAPTCHA. However, security headers and incident response policies are not explicitly published. Overall, the site reflects a trustworthy and professional business with strong market positioning in the Italian transportation technology sector.

S

SEA Corporate

milanairports.com

10

SEA Corporate operates the Milan Linate and Milan Malpensa airports, providing comprehensive airport management and passenger services. The company holds a significant market position as a major transportation hub in Italy, targeting general travelers and business clients. The website reflects a professional corporate presence with clear branding and consistent messaging focused on airport operations and sustainability. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance and mobile optimization. Security measures include HTTPS, cookie consent management via Cookiebot, and integration with Google Tag Manager for controlled script deployment. However, some security headers and explicit incident response contacts are not evident in the provided data. Overall, the site demonstrates a mature digital presence with strong privacy compliance and user tracking transparency.

A

Auto-École FUN DRIVE - Genève

fun-drive.ch

48

Auto-École FUN DRIVE - Genève is a well-established driving school based in Geneva, Switzerland, with nearly three decades of experience. The company offers a range of services including car and motorcycle driving lessons, first aid courses, and sensitization programs. Their market position is strong locally, supported by a history of over 3000 driving licenses obtained and experienced, federally certified instructors. The website reflects a professional and consistent brand image targeting individuals seeking driving education in the Geneva area. Technically, the site is built on WordPress with modern plugins and tools such as Google reCAPTCHA and GDPR compliance mechanisms, hosted by Net Oxygen. While the site performs moderately well with good mobile optimization and SEO, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and cookie consent management, but the contact form misconfiguration and lack of explicit security headers are areas to address. Overall, the website is trustworthy and compliant with GDPR, though it lacks explicit security and incident response policies. Strategic recommendations include fixing the contact form, enhancing security headers, and publishing security policies to improve trust and compliance.

ANAS S.p.A. operates the website www.anasrisanamentoacustico.it to provide acoustic mapping and noise mitigation information related to road infrastructure in Italy. The site targets residents and stakeholders concerned with noise pollution near major roads. The company is a large, government-owned transportation entity with a strong market position in Italy. Technically, the website is built on WordPress with standard plugins and uses Matomo for analytics, showing a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies. Overall, the site is professional, trustworthy, and compliant with relevant regulations.

A

Anas S.p.A.

anas-sisma2016.it

61

The website www.anas-sisma2016.it serves as an official government portal managed by Anas S.p.A., the implementing entity for restoring road infrastructure in areas affected by the 2016 seismic events in Italy. It provides detailed information on emergency response, technical inspections, and phased interventions across multiple regions. The site targets government agencies, local authorities, contractors, and the public interested in infrastructure recovery. Technically, the site is built on WordPress with a modern tech stack including jQuery, Matomo analytics, and responsive design elements, offering a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Privacy compliance is moderate, with cookie consent present but no explicit privacy or terms of service policies found. Overall, the site is professional, trustworthy, and aligned with its government mission.

A

Anas

graart.it

63

GRAArt is a government-sponsored cultural project by Anas, focusing on urban street art in Rome, particularly murals on the Grande Raccordo Anulare. The website serves as a platform to showcase these artworks and promote cultural heritage, targeting a general audience interested in contemporary urban art and local history. Technically, the site is built on WordPress with common plugins like Yoast SEO and Slider Revolution, providing a good user experience and mobile optimization. However, the WordPress version is outdated, which poses security risks. The site uses HTTPS and has a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Social media integration is present and consistent with the project's branding. Overall, the site is trustworthy and professionally presented but would benefit from security and compliance improvements.

A

Anas S.p.A.

guidaebasta.it

59

Anas S.p.A., a key Italian government-owned enterprise under Gruppo FS Italiane, operates the website GUIDAeBASTA to promote road safety awareness and infrastructure maintenance. The site targets the general public and drivers, providing campaigns, projects, and educational content to reduce road accidents. The company holds a strong market position in Italy's transportation sector, leveraging official partnerships and government backing. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS and privacy-respecting analytics (Matomo), though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing trust. Contact information is clearly presented, including official email, phone, and physical address. Overall, the website is professional, trustworthy, and aligned with its public safety mission.

A

Anas S.p.A.

stradeanas.it

70

Anas S.p.A. is a large, state-owned Italian company responsible for managing national road infrastructure, including state roads and highways. It operates under the Gruppo FS Italiane and holds a key position in Italy's transportation sector. The website serves as an institutional portal providing comprehensive information about the company, its subsidiaries, services, and initiatives. The target audience includes government entities, transport professionals, and the general public. The business model focuses on infrastructure management, maintenance, and safety promotion.

F

FS International SpA

fsinternational.it

62

FS International SpA is a prominent European rail transport company specializing in high-speed rail services across borders, regulated rail passenger services, and urban mobility solutions. As part of the FS Italiane Group, it holds a leading position in the European transportation sector, focusing on sustainable and seamless passenger mobility. The website reflects a professional corporate presence with clear branding and comprehensive business information. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and analytics tools, ensuring a good user experience and mobile optimization. Security measures include HTTPS and a strict Content-Security-Policy header, complemented by a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and strong business credibility, with room for enhanced security transparency.

F

FSTechnology

fstechnology.it

61

FSTechnology is a medium-sized technology company operating within the transportation sector in Italy, primarily serving as a digital transformation and technology service provider for the Ferrovie dello Stato Italiane group. The company offers a range of services including continuous and project-based technological services, managed and proprietary platforms, and advanced digital solutions such as IoT, blockchain, 5G, and robotic process automation. The website reflects a professional and consistent corporate identity with a focus on innovation and sustainability. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and marketing tools, and implements strong security measures including HTTPS and a strict Content-Security-Policy. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, explicit contact information and security policies are not prominently displayed on the homepage, which could be improved. Overall, the website and domain registration data indicate a legitimate and trustworthy business entity with a solid market position in Italy's transportation technology sector.

F

Fondazione FS Italiane

fondazionefs.it

66

Fondazione FS Italiane is a well-established non-profit organization dedicated to preserving and promoting Italy's railway heritage. The website offers comprehensive information about historic train journeys, museum visits, and cultural events, targeting railway enthusiasts, tourists, and educational groups. The foundation operates under the umbrella of the FS Italiane group, Italy's state railway company, reinforcing its market position and credibility. Technically, the website is built on Adobe Experience Manager with modern JavaScript libraries and includes robust cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, Content Security Policy, and no evident vulnerabilities, although some additional headers could enhance protection. Privacy compliance is well addressed with GDPR-aligned policies and consent banners. Overall, the site is professional, trustworthy, and serves its audience effectively.

F

Ferservizi Spa

ferservizi.it

54

Ferservizi Spa is a key service company within the FS Italiane Group, providing a broad range of services including accounting, real estate management, procurement, HR administration, and facility management. The company supports the Italian railway sector with specialized internal and external services, positioning itself as an important entity in transportation and real estate services in Italy. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to corporate clients and stakeholders. Technically, the site leverages Adobe Experience Manager and integrates modern analytics and consent management tools, indicating a solid digital infrastructure. Security posture is strong with HTTPS, a strict Content-Security-Policy, and cookie consent mechanisms, although some additional security headers could enhance protection. Overall, the site is trustworthy, compliant with GDPR, and aligned with the business's corporate identity and market position.

I

Italcertifer S.p.A.

italcertifer.com

55

Italcertifer S.p.A. is a medium-sized Italian company specializing in railway certification, testing, and safety verification services. It is a subsidiary or closely affiliated entity of Ferrovie dello Stato Italiane, Italy's national railway group, and collaborates with prominent Italian universities. The company positions itself as a center of excellence in railway conformity and safety, offering services such as certification of rolling stock, signaling, infrastructure, energy, and urban transport, alongside laboratory testing and project verification. The website content is professionally presented in Italian, targeting industry stakeholders and clients requiring railway safety and compliance services. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates analytics and marketing tools including Siteimprove Analytics, Adobe Launch, and LinkedIn Insight Tag. The site is mobile-optimized with good accessibility and SEO practices. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible HTTP security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, though the website's affiliation with a reputable parent company mitigates this risk. Overall, Italcertifer's website demonstrates a solid business and technical foundation with good security hygiene, though improvements in domain registration transparency and security header implementation are recommended to enhance trust and compliance.

I

Italferr S.p.A.

italferr.it

10

Italferr S.p.A. is a prominent Italian engineering company specializing in railway infrastructure design, project management, and technological innovation. As a subsidiary of Ferrovie dello Stato Italiane, Italferr holds a leading market position in the transportation sector, offering comprehensive engineering services with a strong focus on sustainability and quality. The company targets government agencies, infrastructure developers, and transportation stakeholders, leveraging its extensive experience and certifications to maintain competitive advantage. The website reflects a mature digital presence with clear navigation, professional content, and consistent branding. Technically, the site is built on Adobe Experience Manager, utilizing modern analytics and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is robust with HTTPS, Content Security Policy, and secure script loading, although some additional headers could enhance protection further. Overall, the website demonstrates high trustworthiness and professionalism, supporting Italferr's business credibility and market reputation.

F

FS PARK

fspark.it

59

FS PARK operates as a key service provider managing parking facilities linked to the Italian railway network, serving commuters and travelers across Italy. The website reflects a medium-sized enterprise with strong ties to the Gruppo FS Italiane, offering diverse parking solutions including bike parks and bus terminals. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and comprehensive analytics tools, indicating a mature digital presence. Security posture is strong with HTTPS, strict Content-Security-Policy, and cookie consent mechanisms in place, though explicit security policy and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in the transportation sector.

F

FS Logistix

fslogistix.com

53

FS Logistix is a leading Italian logistics and freight transport company specializing in rail and intermodal transport solutions. As part of the Gruppo FS Italiane, it offers integrated logistics services focused on innovation and sustainability, targeting businesses across multiple industrial sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information. Technically, the site leverages Adobe Experience Manager, Bootstrap, and modern tracking and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS, Content-Security-Policy headers, and CAPTCHA-protected forms, though additional security headers and a published security policy could enhance trust. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the strong corporate affiliation and professional web presence. Overall, FS Logistix demonstrates a solid business and technical foundation with room for minor security and transparency improvements.

G

Gruppo FS

fsnews.it

54

FSNews is the official online news portal of the Gruppo FS, Italy's state-owned railway group. It serves as a key communication channel providing news, updates, and cultural content related to transportation, sustainability, innovation, and corporate affairs. The website targets journalists, stakeholders, and the general public interested in the railway sector and mobility. The platform integrates multimedia content including radio streaming and video links, enhancing user engagement. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and third-party analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent management. Security is well addressed with HTTPS, a comprehensive Content Security Policy, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policies and terms of service are not clearly found in the provided content, which could be improved for compliance and transparency. Overall, the website demonstrates a mature digital presence aligned with enterprise standards and Gruppo FS's authoritative market position.

myCicero is an established Italian mobility services platform founded in 2012, offering a range of mobility management solutions for transport operators, public entities, large companies, and events. The website promotes both B2B services and a consumer-facing mobility app, MooneyGo, which replaces the original myCicero app. The platform positions itself as the first Global Distribution System (GDS) for mobility in Italy, targeting a broad audience from institutional clients to end users. The site content is professionally presented with good design and navigation, though it lacks visible privacy and security policy disclosures. Technically, the website uses modern frontend technologies including Bootstrap 5 and Google Fonts, with a responsive design suitable for mobile devices. However, no CMS or backend technologies are evident from the homepage HTML. Performance is moderate, and SEO and accessibility features are basic but present. No analytics or tracking scripts were detected in the provided content, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by domain), but no DNSSEC is enabled and no security headers are visible in the HTML content. There are no published privacy, cookie, or terms of service policies, nor any contact information for security incidents or data protection officers. The WHOIS data shows a consistent and legitimate domain registration since 2012 with no privacy protection, supporting trustworthiness. Overall, the security posture is moderate but could be improved with better policy disclosures and technical security controls. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information for security and privacy concerns to enhance trust and compliance.

F

Ferrovie dello Stato Italiane SpA

fsitaliane.it

62

Ferrovie dello Stato Italiane SpA is a leading state-owned enterprise in Italy specializing in rail transport and infrastructure services. It operates a broad portfolio of subsidiaries including Trenitalia and RFI, serving millions of passengers and freight customers annually. The company emphasizes sustainability, innovation, and integrated mobility solutions, positioning itself as a key player in Italy's transportation sector. The website reflects a mature digital presence with comprehensive content targeting passengers, investors, and stakeholders. Technically, the site leverages Adobe Experience Manager and integrates multiple analytics and marketing tools, ensuring a modern and responsive user experience. Security measures such as HTTPS and Content Security Policy are implemented, though additional headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

V

VCÖ

vcoe.at

56

VCÖ is a well-established Austrian non-profit organization dedicated to promoting ecologically sustainable, socially just, and economically efficient mobility. Their website serves as a comprehensive platform offering research, publications, events, and advocacy aimed at improving transportation policies and practices in Austria. The organization targets a broad audience including citizens, municipalities, and policymakers, emphasizing fair mobility opportunities for all demographics. Technically, the site is built on the Contao CMS and employs modern web technologies such as jQuery, Matomo Analytics, and Google Tag Manager, ensuring a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and CAPTCHA protections, though some security headers and explicit policies could be improved. Overall, the website is professional, trustworthy, and content-rich, reflecting the organization's credibility and commitment to sustainable mobility.

Z

Zemtu OG

zemtu.com

7

Zemtu OG operates a website offering an all-in-one shared mobility software solution designed to manage cars, bikes, and scooters within a single app. The platform targets businesses and organizations aiming to implement ambitious mobility concepts, providing vehicle access control, journey documentation, and data analytics for statistics and accounting. The website is professionally designed using modern web technologies such as Nuxt.js and BootstrapVue, and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with no visible security headers or policies, and privacy compliance is poor due to missing privacy and cookie policies. Contact information and incident response details are not provided, limiting transparency and user trust.

C

Conftrasporto - Confcommercio

conftrasporto.it

51

Conftrasporto is a key Italian transport and logistics industry federation operating under the umbrella of Confcommercio. The website serves as an institutional platform providing information and advocacy for transport enterprises in Italy. The digital infrastructure is based on WordPress with standard plugins for SEO, analytics, and cookie compliance, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving its target audience effectively.