Security Directory

J

JP Harris Developments Ltd

jpharris-developments.co.uk

63

JP Harris Developments Ltd is a small, family-owned property renovation specialist based in Reading, UK, offering a range of building services including house extensions, new builds, kitchen and bathroom installations, and loft and garage conversions. The company emphasizes reliability, quality workmanship, and customer satisfaction, supported by positive testimonials and a professional online presence. The website is well-structured, mobile-optimized, and uses modern web technologies and analytics tools, indicating a moderate level of digital maturity. Security measures include HTTPS and CAPTCHA protections on forms, but lack some advanced security headers and published security policies. The WHOIS data for the domain is unavailable due to a naming rules error, which raises concerns about domain registration legitimacy, though the website content itself appears professional and trustworthy. Overall, the site presents a credible business with room for improvement in security transparency and domain registration clarity.

Fairmitre (Shropshire) Windows & Conservatories Ltd is a well-established family-owned business operating since 1982, specializing in manufacturing and installing high-quality conservatories, orangeries, windows, and doors primarily serving the Shropshire region. The company emphasizes personalized service, competitive pricing, and maintains a showroom for customer visits. Their market position is that of a trusted local provider with certifications that enhance credibility. Technically, the website is built on WordPress with modern technologies such as Tailwind CSS and Alpine.js, and includes SEO optimization via Yoast. It employs Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is mobile-optimized and provides a good user experience, though some accessibility features could be improved. From a security standpoint, the site uses HTTPS and reCAPTCHA but lacks important security headers and formal privacy or cookie policies, indicating room for compliance and security posture enhancement. The WHOIS data for the domain is unavailable due to an invalid domain name error, which raises concerns about domain registration legitimacy but does not directly impact the website's operational legitimacy. Overall, the website presents a professional and trustworthy business front with minor technical and compliance gaps. Strategic improvements in security headers, privacy compliance, and domain registration verification are recommended to strengthen trust and security.

Clan & Plant Tools Ltd, part of the Emergency One Group, is a UK-based company specializing in the supply of equipment and manufacturing of emergency vehicles, including fire engines and rescue vehicles. The company targets a broad audience ranging from large organizations to private individuals, positioning itself as a reputable supplier in the transportation and emergency services sector. The website reflects a professional business presence with detailed product offerings and a clear brand identity aligned with its parent group. Technically, the site is built on WordPress using modern plugins such as Elementor and WooCommerce, ensuring a flexible and scalable platform. SEO and structured data implementations are well executed, enhancing search visibility and content clarity. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. Overall, the website is functional, professional, and trustworthy, but could benefit from enhanced privacy compliance and security hardening to meet best practices and regulatory requirements.

A

Additional Aids Mobility

aamobility.co.uk

47

Additional Aids Mobility is a UK-based small business specializing in providing high quality and cost effective mobility aids and related services. Established since 2002, the company appears to serve a general audience seeking mobility solutions. The website is built on WordPress using WooCommerce and the Divi theme, indicating a moderate level of digital maturity with e-commerce capabilities. Technical infrastructure includes modern web technologies and hosting by 20i Ltd, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, although formal privacy and terms policies are absent, which could impact compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

B

Bridgewater Funeral Service Ltd

bridgewaterfuneralservice.co.uk

56

Bridgewater Funeral Service Ltd is a family-owned and operated funeral director business serving Boothstown, Worsley, Walkden, Astley, and surrounding areas in Manchester, UK. Established in 2013, the company offers a range of funeral services including tailored, simple, and direct funerals, as well as pre-paid funeral plans and memorial jewellery. The business holds recognized industry memberships such as the National Association of Funeral Directors and the British Institute of Funeral Directors, reinforcing its professional standing and commitment to quality service. The website features 64 verified 5-star reviews, indicating strong customer satisfaction and trust. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery, Google reCAPTCHA for form security, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured data. Hosting is managed via Ionos SE, consistent with the domain registrar information. Performance is moderate with room for optimization. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect its contact forms. However, it lacks explicit security headers and a published security policy or incident response plan, which are recommended for enhanced security posture. Privacy compliance is partially addressed with a privacy and cookie policy present, but no active cookie consent mechanism is implemented. Overall, the site maintains a good security baseline but could improve in transparency and compliance. The overall risk assessment is low with no signs of malicious activity or vulnerabilities detected in the content or technical setup. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing a security policy, and maintaining regular updates to the CMS and plugins to mitigate potential risks. These steps will enh…

R

RAND Corporation

rand.org

70

RAND Corporation is a large, well-established nonprofit research organization founded in 1948, focused on providing objective research and public policy analysis across a broad range of sectors including health, education, national security, and international affairs. The organization operates multiple research divisions both in the U.S. and internationally, serving government agencies, policymakers, and the public with evidence-based insights and solutions. The website reflects this mission with comprehensive content, expert commentary, and resources such as newsletters and podcasts. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Adobe DTM for tag management, Google reCAPTCHA for form security, and Chartbeat for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. Privacy and terms of service are well documented, though cookie policy visibility could be improved. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and employs Adobe's tag management system. However, explicit security headers are not clearly visible in the HTML, and there is no published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to query failure or privacy protection, but the website's legitimacy is supported by its consistent branding, professional content, and trust signals. Overall, RAND.org presents a trustworthy, professional, and secure online presence appropriate for a major nonprofit research institution. Strategic improvements could include publishing a dedicated security policy, enhancing cookie consent mechanisms, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

D

Diena

diena.lv

51

Diena.lv is the largest national newspaper and news portal in Latvia, providing comprehensive news coverage across various sectors including local, international, sports, culture, and lifestyle. The website supports subscription services and integrates multiple advertising and analytics platforms to monetize and analyze user engagement. The technical infrastructure is modern with HTTPS enforcement, use of popular web fonts, social media SDKs, video players, and ad networks. Security posture is solid with appropriate headers and no visible vulnerabilities, though explicit privacy and terms of service documents are not found, indicating room for compliance improvement. Overall, the site is professional, content-rich, and trustworthy, serving a broad general audience with safe content.

Experian Employer Services is a division of Experian, a global leader in information services, providing comprehensive HR, Payroll, and Tax solutions to employers. Their offerings focus on compliance, operational efficiency, and employee lifecycle management, serving over 3,500 employers and 30 million employees. The website demonstrates a mature digital presence with a professional design, clear navigation, and extensive product information tailored to HR and payroll professionals. Technically, the site leverages Adobe Experience Manager and integrates multiple analytics and marketing tools, ensuring a modern and responsive user experience. Security posture is strong with HTTPS enforcement, use of reCAPTCHA, and no visible vulnerabilities, although explicit security headers should be confirmed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site reflects a trustworthy and enterprise-grade business platform.

A

Andele Mandele

andelemandele.lv

64

Andele Mandele is a Latvian e-commerce marketplace specializing in a wide range of retail products, including clothing for women, men, and children, as well as home goods and transport-related items. The platform serves as a popular local portal with a large catalog exceeding 300,000 items, targeting Latvian-speaking consumers. The website employs modern web technologies such as Vue.js, Bootstrap, and integrates Google services like reCAPTCHA and Tag Manager to enhance user experience and security. While the site is well-structured and mobile-optimized, it lacks explicit privacy policy and terms of service pages, which are critical for compliance and user trust. Security posture is generally good with HTTPS and bot protection in place, but could be improved with clearer security policies and incident response information. Overall, the site presents a professional and trustworthy retail platform with room for enhanced privacy and security transparency.

L

LA 28

la28.org

73

LA28.org is the official website for the 2028 Olympic and Paralympic Games in Los Angeles, serving as a comprehensive information hub for fans, volunteers, partners, and stakeholders. The site provides detailed content on games planning, ticketing, volunteer opportunities, partners, and news updates. It targets a broad audience interested in the Olympic movement and the upcoming LA28 event. The business operates as a large, government/non-profit entity with a clear mission to organize and promote the Games. Technically, the website leverages Adobe Experience Manager as its CMS, integrates modern analytics and monitoring tools such as Datadog RUM and Google Tag Manager, and employs OneTrust for cookie consent management. The site is mobile optimized, accessible, and SEO friendly, with a professional design and consistent branding.

C

Camicetta

camicetta.pl

54

Camicetta.pl is a Polish small business specializing in the production of branded clothing such as sweatshirts, t-shirts, and hats, primarily serving corporate clients and educational institutions. The website presents a professional image with consistent branding and clear business focus. The technical infrastructure is based on Joomla CMS with Yootheme templates, integrating modern marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight, and Sales Manago marketing automation. Cookie consent is managed comprehensively via Cookiebot, indicating good privacy compliance. Security measures include HTTPS and Google reCAPTCHA, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data confirms domain legitimacy and appropriate registration history.

3

3PIĘTRO

3pietro.eu

42

3PIĘTRO is a small real estate agency based in Poland, specializing in property sales, rental management, and home staging services primarily in Sosnowiec and nearby cities. The website presents a professional and content-rich platform with detailed property listings and team member contacts, supported by active social media channels. Technically, the site uses a custom real estate CMS with common web technologies such as jQuery, Bootstrap, and Google Fonts, delivering a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks important security headers and explicit privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable due to registry privacy, limiting domain trust assessment, but the website content and structure indicate a legitimate local business. Overall, the site scores moderately well in content quality and business credibility but should improve privacy compliance and security best practices.

R

Rent Dream Car

rentdreamcar.pl

37

Rent Dream Car is a specialized car rental company based in Warsaw, Poland, offering luxury, sports, premium, and SUV vehicles for short and long-term rental. The company emphasizes professional customer service, transparent rental agreements, and a modern, well-maintained fleet. Their market position is strong locally with a focus on high-end clientele seeking premium automotive experiences. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is good with HTTPS and reCAPTCHA, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is basic with cookie consent and a privacy policy present. Overall, the business demonstrates credibility and trustworthiness with clear contact details and positive customer reviews.

Sanitex Latvia is a well-established FMCG distribution company founded in 1992, serving over 32,000 clients and collaborating with more than 500 manufacturers across the Baltic states. The website reflects a professional B2B business model focused on wholesale and distribution services. Technically, the site is built on WordPress with Elementor, leveraging modern plugins and SEO tools, and is hosted behind Cloudflare DNS services. Security measures include HTTPS enforcement, Google reCAPTCHA for bot protection, and a GDPR-compliant cookie consent mechanism. However, explicit privacy policy and terms of service pages are not detected, and no direct contact information is publicly available on the site. Overall, the website demonstrates a solid digital presence with good technical implementation and security posture but could improve transparency and user trust by publishing comprehensive privacy and security policies.

T

Torres Bühl

eventraum-buehl.de

41

Torres Bühl operates a hospitality business in Bühl, Germany, specializing in Spanish tapas and Mediterranean cuisine alongside event planning and hosting services for private and corporate clients. The website presents a local small business with over 30 years of experience in event gastronomy, targeting local residents and companies seeking venue and catering services. The digital presence is built on a 1blu Homepage Baukasten CMS platform, utilizing jQuery and Google reCAPTCHA for form security. While the website provides essential contact information and a gallery showcasing the venue and offerings, it lacks comprehensive privacy and security policies, and mobile optimization is basic. Security posture is moderate with some best practices like CAPTCHA but missing security headers and explicit SSL configuration details. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced privacy compliance and security hardening.

N

NOS

nos.pt

57

NOS is a major Portuguese telecommunications company offering a wide range of services including 5G mobile networks, fixed and mobile internet, television, telephone, and alarm systems. The website reflects a mature digital presence with a comprehensive online store and customer support resources. The company targets general consumers in Portugal and maintains a strong market position as a leading telecom operator. Technically, the site leverages Adobe Experience Manager, Salesforce SDKs, and Google marketing and analytics tools, indicating a modern and integrated infrastructure. Security posture is solid with HTTPS, cookie consent, and bot protection, though explicit security policies and vulnerability disclosure mechanisms are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting NOS's credibility and customer engagement.

G

G Wellness

g-wellness.com

62

G Wellness is a small healthcare technology company offering AI-powered lab test analysis and personalized wellness advice. Their service targets individuals seeking fitness, endurance, or longevity improvements by uploading lab tests and receiving detailed reports and action plans. The website is built on Squarespace and integrates modern technologies such as Google reCAPTCHA and Facebook Pixel for security and marketing. While the site is professionally designed and mobile optimized, it lacks explicit privacy and cookie policies, which are critical for compliance in healthcare-related services. Security posture is good with HTTPS and HSTS enabled, but additional security headers and policies would strengthen it. The absence of WHOIS data for the domain raises legitimacy concerns, although the website content and certifications claims (HIPAA, SOC 2, GDPR) provide some trust signals. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

S

SIA MBD Latvia

mbd.lv

42

MBD Latvia is a large digital marketing agency operating primarily in Latvia and the Baltic region, positioned as the largest digital media agency in the Baltics. The company offers a comprehensive suite of digital marketing services including SEO, search ads, social media communication, digital strategy, Facebook advertising, B2B marketing, global market entry, analytics, programmatic RTB, and video production. Their client base and certified specialists underscore their market leadership. Technically, the website is built on WordPress with modern SEO and tracking tools, hosted on DigitalOcean, and includes Google reCAPTCHA for security. The site is well-optimized for mobile and SEO, with a cookie consent mechanism and GDPR-compliant privacy policy. Security posture is good with HTTPS and form protections, though security headers and incident response policies are absent. Overall, the website is professional, trustworthy, and aligned with the business claims, with no signs of suspicious activity or content.

A

AI Invest Lab

aiinvestlab.com

57

AI Invest Lab is a small fintech company based in Dubai, UAE, specializing in automated investing solutions leveraging AI technologies. The company operates a professionally designed website hosted on the Squarespace platform, targeting investors and users interested in automated financial investment services. Their market position appears to be a niche fintech provider focusing on AI-driven investment automation. The website includes social media presence on Instagram, YouTube, and TikTok, enhancing their digital footprint. Technically, the website is built on Squarespace CMS with integrations such as Typekit fonts, Google reCAPTCHA for form security, and Weglot for multilingual support. The site demonstrates good mobile optimization and moderate performance. SEO and accessibility are basic but adequate for a small business. Hosting and domain registration are consistent and legitimate, with SSL and HSTS enabled, ensuring secure communications. From a security perspective, the website follows several best practices including HTTPS enforcement and use of reCAPTCHA. However, it lacks advanced security headers like Content-Security-Policy and does not publish privacy, cookie, or terms of service policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. Overall, AI Invest Lab presents a moderate risk profile with a solid technical foundation but gaps in privacy compliance and security policy disclosures. Strategic improvements in these areas would enhance trustworthiness and regulatory compliance.

L

Lemon Gym

lemongym.lv

58

Lemon Gym is a medium-sized fitness club chain operating in Latvia, offering 8 club locations with modern gym facilities, group and private training sessions, sauna, and wellness services. The website is professionally designed with multilingual support and provides comprehensive information about their services and clubs. Technically, the site is built on WordPress with modern plugins and tracking technologies, ensuring good SEO and mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and security hardening plugins, though some HTTP security headers could be improved. Privacy compliance is good with a clear privacy policy and terms of service, but lacks an explicit cookie consent mechanism. Overall, Lemon Gym presents a trustworthy and professional online presence with moderate user tracking and advertising practices.

R

Recorded Future

tria.ge

62

Recorded Future Triage is a specialized cybersecurity service offering a malware analysis sandbox designed for security professionals to dissect malware samples, track malware trends, and classify threats. The platform supports high-volume sample submissions and provides public reports, positioning itself as a valuable tool in the cybersecurity threat intelligence market. The website reflects a mature business with a domain age consistent with its founding in 2014 and is part of the Recorded Future brand. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google reCAPTCHA for security on its login forms. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security best practices such as HTTPS, CSRF tokens, and CAPTCHA are implemented, but additional security headers and explicit security policies could enhance the posture. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with a cookie consent banner and privacy policy, though direct contact information and incident response details are not publicly available. The site maintains a professional appearance with consistent branding and trustworthy external links. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact channels for incident response to further improve trust and compliance.

A

Andreas Bürsten GmbH

buersten.de

46

Andreas Bürsten GmbH operates as a manufacturer and supplier specializing in brushes, brooms, and cleaning aids, targeting both business and individual customers primarily in Germany. The website presents a professional image with clear branding and a well-structured navigation system, supporting a positive user experience. The business model focuses on direct factory production and supply, positioning itself as a reliable provider in its niche market. Technically, the website leverages modern web technologies including jQuery, Bootstrap, and integrates third-party services such as Google Analytics, Google Ads, and reCAPTCHA to enhance functionality and security. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a strong commitment to GDPR compliance. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA, though there is room for improvement in implementing additional security headers and publishing explicit security policies. Overall, the site is trustworthy, well-maintained, and compliant with relevant privacy regulations, making it a credible digital presence for the company.

D

Danny's

dannysnyc.com

62

Danny's is a small American wine bistro located in New York City, offering dining and private event services. The website is professionally designed using the Squarespace platform, featuring integration with the Resy reservation system and Google Maps for location. The site is mobile optimized and provides clear navigation to menus, hours, and contact information, although contact details are limited to a physical address. Security is well implemented with HTTPS and HSTS, and Google reCAPTCHA is used for form protection. However, the absence of privacy and cookie policies, as well as missing WHOIS data, reduce overall trust and compliance scores.

C

CIOB Academy

ciobacademy.org

60

CIOB Academy is an educational platform dedicated to developing leaders in the construction industry. It offers a variety of courses, webinars, and continuing professional development (CPD) opportunities aimed at advancing careers within the construction sector. The website positions itself as a professional and trusted provider of construction leadership training, targeting construction professionals seeking career advancement. Technically, the website is built on WordPress using the Divi theme and integrates WooCommerce for e-commerce capabilities, along with several plugins for course management and marketing analytics. The site employs modern tracking and marketing tools such as Google Tag Manager, Hotjar, and LinkedIn Insight, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and reCAPTCHA for form protection but lacks visible security headers and explicit security policies, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy, though it would benefit from clearer privacy and contact information to improve user confidence and regulatory compliance.

B

Bottle Raiders

arteagave.com

58

Arte Agave is a niche hospitality business specializing in immersive events celebrating fine agave spirits, cocktails, art, and culture. The company, legally known as Bottle Raiders, has been operating since 2013 and targets adult consumers interested in agave-based beverages and cultural experiences. Their business model includes event hosting and merchandising, supported by a professional website built on the Squarespace platform. The site features rich multimedia content, social media integration, and clear event-related policies. Technically, the website leverages modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and policies could enhance protection. Privacy and cookie policies are present but basic, with limited GDPR compliance indicators. Overall, the website presents a trustworthy and professional image suitable for its market niche.

O

OneLog AG

onelog.ch

69

OneLog AG operates a centralized login platform serving the Swiss media industry, enabling users to access multiple digital media offerings with a single registration. The platform is positioned as a key enabler for the Swiss Digital-Allianz, a coalition of major Swiss media and publishing houses. The website clearly communicates its value proposition, emphasizing simplicity, security, and centralized user data management. The business model revolves around providing a unified authentication service to media consumers, enhancing user experience across partner media brands.

S

Schweizer Strohmuseum

strohmuseum.ch

61

Schweizer Strohmuseum is a specialized cultural museum in Switzerland dedicated to the history and craft of straw art and industry. The website presents a well-structured and professionally designed platform offering information about exhibitions, guided tours, educational programs, and museum shop services. The target audience includes general visitors interested in cultural heritage and history. Technically, the site is built on the Squarespace CMS platform, leveraging modern web technologies such as Typekit fonts, Google reCAPTCHA, and Weglot for multilingual support. Performance and mobile optimization are good, though accessibility features could be improved. Security posture is strong with HTTPS and HSTS enabled, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy and cookie policies, which impacts compliance with GDPR and related regulations. Contact information is not clearly presented, which may affect user trust and business credibility. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and clearer contact channels.

K

K. Lienhard AG

lienhard-ag.ch

49

K. Lienhard AG is a Swiss engineering firm specializing in the planning, documentation, and maintenance of infrastructure for energy and water supply. With over six decades of experience, the company serves utilities and infrastructure operators across Switzerland, offering a broad range of professional services and products. The website reflects a mature market position with clear service offerings and a professional digital presence. Technically, the site is built on WordPress with WooCommerce and integrates privacy-conscious analytics and Google reCAPTCHA for form security. Security posture is solid with HTTPS and no obvious vulnerabilities, though some improvements in security headers and explicit policies could enhance trust. Overall, the site is accessible, well-structured, and compliant with GDPR, though a cookie consent mechanism is missing. Strategic recommendations include enhancing security policies, adding cookie consent, and publishing terms of service to improve compliance and user trust.

G

Gemeinde Dintikon

dintikon.ch

50

Gemeinde Dintikon is the official website of the municipality of Dintikon, Switzerland, providing residents and visitors with comprehensive information about local government services, politics, administration, education, environment, leisure activities, and current news. The site serves as a key communication channel for the community, offering contact details, event announcements, and online services. The website is well-structured and professionally designed, reflecting its role as a trusted local government portal. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, Moment.js, and Google reCAPTCHA for form security. The site appears to be custom-built or uses a proprietary CMS, with moderate performance and good mobile optimization. However, there is room for improvement in accessibility and SEO optimization. No major technical issues or vulnerabilities are evident from the provided data. From a security perspective, the website uses HTTPS and integrates Google reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish privacy or cookie policies, which are important for GDPR compliance and user trust. There is no evidence of a vulnerability disclosure policy or incident response contacts. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment is low given the nature of the site as a municipal government portal with no sensitive user data collection beyond basic contact forms. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing clear incident response contacts to improve compliance and security maturity.

S

Spitex Limmat Aare Reuss AG

spitex-lar.ch

50

Spitex Limmat Aare Reuss AG is a Swiss healthcare provider specializing in outpatient nursing and care services. The company emphasizes professional, high-quality care with a strong focus on collaboration with healthcare professionals and families. Their services include somatic and psychiatric nursing, wound and stoma care, palliative care, dementia care, household services, and additional comfort services. They also invest in education and training, positioning themselves as a regional leader in outpatient care. Technically, the website is built on WordPress with modern analytics and security tools such as Google reCAPTCHA and Plausible Analytics. The site is well-optimized for mobile and SEO, with clear navigation and professional design. Security posture is good with HTTPS and form protections, though some security headers and policies could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a trustworthy and professional healthcare organization with a solid digital presence.

Regionales Führungsorgan Baden (RFO Baden) is a regional government entity responsible for coordinating emergency and disaster response measures in the Baden region of the Canton Aargau, Switzerland. The website serves as an information portal for the public and local authorities, providing updates on population protection, safety events, and emergency plans. The organization supports municipalities in managing crises and severe shortages, positioning itself as a key regional coordination body in civil protection. Technically, the website is built on WordPress using WPBakery Page Builder and Yoast SEO for content management and optimization. It employs modern web technologies including Bootstrap for responsive design and Google reCAPTCHA to secure its contact form. The site demonstrates good mobile optimization and basic accessibility features, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with an excellent SSL configuration and integrates reCAPTCHA to prevent spam. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure policies, which are important for transparency and trust. No critical vulnerabilities or suspicious elements were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, RFO Baden's website is a professional, trustworthy platform that effectively supports its governmental mission. Strategic enhancements in security policies, cookie consent, and transparency would further strengthen its security posture and compliance with data protection regulations.

R

Regionale 2025

regionale2025.ch

53

Regionale 2025 is a regional government-backed initiative focused on promoting cultural, spatial, and societal projects in the Limmattal region of Switzerland. The website serves as a platform to showcase around 30 innovative projects supported by 16 municipalities and the cantons of Aargau and Zürich, with a program of events running from May to October 2025. The target audience includes local residents, cultural stakeholders, and visitors interested in regional development and community engagement. The business model is primarily public sector and non-profit, emphasizing regional collaboration and cultural promotion. Technically, the website is built on WordPress with modern plugins such as Gravity Forms for data collection, Instagram Feed Pro for social media integration, and Google reCAPTCHA for form security. It uses Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good accessibility and SEO practices, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response information, which could be enhanced to improve trust and compliance. Privacy compliance is basic, with a privacy policy present but no cookie consent banner detected. Overall, the website is professional, trustworthy, and well-aligned with its public sector mission. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security and incident response policies, and enhancing security headers to strengthen the security posture further.

S

SocialCatnip

socialcatnip.com

55

SocialCatnip is a specialized Webflow development and digital marketing agency focusing on marketing technology, conversion tracking, GA4, and Google Tag Manager. The company targets B2B SaaS businesses and offers a comprehensive suite of services including marketing tech integrations, technical SEO, tracking and analytics, webflow development, paid media, web design, and local services ads. The website reflects a mature, professional business with a decade of experience and a strong client base, supported by positive testimonials and notable client logos. Technically, the website is built on Webflow and leverages modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Hotjar, and Microsoft Clarity. The site is well-optimized for performance, mobile responsiveness, and SEO, with a clean and professional design. Security practices include HTTPS enforcement and use of reCAPTCHA, but lack explicit security headers and published security policies. The security posture is solid but could be improved by adding formal privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a concern, suggesting either recent registration or privacy protection, which slightly reduces trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

R

Regionalpolizei Wettingen-Limmattal

repol-wettingen-limmattal.ch

59

Regionalpolizei Wettingen-Limmattal is a regional police authority serving multiple municipalities in the Wettingen-Limmattal area of Switzerland. The website provides information about their mission to maintain public safety, peace, and order in the contractual municipalities. The site targets residents and visitors of these municipalities and operates as a government entity with a small organizational size. Technically, the website uses modern web fonts, Font Awesome icons, and Google reCAPTCHA for bot protection, indicating a moderate level of digital maturity. The site is secured with HTTPS and presents structured data for organization details, enhancing SEO and trust. However, it lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is adequate with HTTPS and bot protection but could be improved by adding security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences, but it would benefit from enhanced privacy compliance and security transparency.

T

Tägi AG

taegi.ch

59

Tägi AG operates a regional leisure and sports center in Wettingen, Switzerland, offering year-round facilities including indoor and outdoor swimming pools, an ice rink, mini golf, sauna, and event spaces. The website reflects a well-established business with a clear focus on community recreation and event hosting. Their market position is that of a key local provider of sports and leisure services, targeting general public and sports enthusiasts. Technically, the website is built on WordPress with a modern theme and plugins, including Yoast SEO and Cookiebot for privacy compliance. The site is mobile-optimized and integrates social media channels effectively. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website sanitaet.info represents Samariterverein Lägern Wettingen, a Swiss non-profit organization focused on first aid training and medical services. The site offers a broad range of courses, a simulation and training center, and a shop for related products. The organization appears to be well-positioned locally with partnerships evident through linked partner sites. Technically, the site is built on the Weebly platform using standard web technologies including jQuery and Google Analytics. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected and the jQuery version is outdated, which could pose risks. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service. WHOIS data is unavailable due to TLD restrictions and privacy protections, but the domain appears legitimate and consistent with the organization's profile. Overall, the site is functional and professional but could improve in security and privacy transparency.

P

Prägebüro GmbH

papiersaal-loc.ch

50

Prägebüro GmbH operates the Papiersaal and Folium event venues located in the historic Old Sihlpapierfabrik in Zurich, Switzerland. The company offers flexible event spaces suitable for conferences, presentations, and celebrations accommodating 60 to 600 guests. Their business model centers on venue rental complemented by comprehensive event services including catering, technical setup, and event creation. The company targets business, private, and public clients seeking unique event locations in Zurich. The website reflects a strong market position within the hospitality sector, supported by partnerships with local tourism and event organizations. Technically, the website is built on the Cmsbox CMS platform with integrations such as Google reCAPTCHA for form security, Typekit fonts for typography, and Piwik analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly, delivering a professional user experience. Performance is moderate with modern web technologies employed, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, but the absence of a cookie consent banner reduces compliance confidence. Overall, the website is trustworthy, professional, and well-aligned with the business objectives. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response information to improve compliance and security posture further.

Z

ZHERO Media

zheromedia.com

64

ZHERO Media is a professional digital communication and marketing agency offering a broad range of services including performance marketing, SEO, social media marketing, branding and design, content marketing, and art design. The company targets businesses seeking to enhance their brand positioning and ROI through strategic marketing campaigns. The website demonstrates a mature digital infrastructure with Webflow CMS, Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Security posture is solid with HTTPS and anti-CSRF cookies, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, but the professional presentation and client trust signals mitigate this risk. Overall, the website is well-designed, user-friendly, and compliant with GDPR cookie consent requirements.

Horfam d.o.o. is a Croatian company specializing in lighting solutions, offering a broad range of lighting products and services including design and project planning. Established in 2000, the company positions itself as a provider of modern, ecological, and energy-efficient lighting technologies tested in demanding applications. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Google Analytics, and includes a cookie consent mechanism compliant with GDPR requirements. Security measures include HTTPS and Google reCAPTCHA, but lack explicit security policies or vulnerability disclosures. The domain registration data aligns well with the company's claims, indicating legitimacy and trustworthiness.

3

365 Fit&Co

365fitco.sk

55

365 Fit&Co is a modern fitness center chain operating multiple locations in Slovakia, including Bratislava, Košice, and Prešov. The company offers well-equipped gym facilities, group training spaces, and wellness amenities such as Finnish saunas. Their market position is that of a regional fitness provider targeting health-conscious individuals seeking quality fitness and wellness services. The website reflects a professional digital presence with localized content and social media integration. Technically, the site is built on WordPress using the Salient theme and includes modern technologies such as Google Tag Manager and reCAPTCHA for security and analytics. Security posture is solid with HTTPS enforced and GDPR cookie compliance implemented, though explicit privacy policies and security disclosures are absent. Overall, the site is trustworthy and well-maintained, supporting the company's business credibility.

S

Stroka produkt d.o.o.

stroka.si

55

Stroka produkt d.o.o., operating under the brand Skupina stroka.si, is a well-established Slovenian IT service provider founded in 2005. The company offers a broad range of IT solutions including infrastructure management, business software integration (notably PANTHEON), digital workplace services leveraging Office 365, business analytics, custom software development, and digital transformation consulting. Their market position is strengthened by a Microsoft Gold Partner certification and multiple industry awards, reflecting a strong reputation in the Slovenian technology sector. The website content and design reflect a professional and mature digital presence targeting business clients seeking comprehensive IT solutions. Technically, the website is built on the DotNetNuke CMS platform, utilizing modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the company demonstrates a mature digital infrastructure and credible business operations.

I

Istarski filmski ured

istriafilmcommission.com

44

Istarski filmski ured is a regional film commission established in 2015 under the Istarska kulturna agencija (IKA) to promote and facilitate audiovisual production in the Istria region of Croatia. The website serves as an informational and promotional platform targeting filmmakers and producers, offering services such as location scouting, permit facilitation, and liaison with public and private entities. Technically, the site is built on WordPress using the Divi theme and several plugins for multilingual support, SEO, accessibility, and cookie compliance. The security posture is adequate with HTTPS enabled and some security best practices observed, though there is room for improvement in security headers and incident response visibility. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessment. Overall, the site is professional, content-rich, and serves its business purpose well, but could enhance transparency and security practices.

E

EKOME, spol. s.r.o.

ekome.cz

40

EKOME, spol. s.r.o. is a Czech company specializing in environmental emission measurements and ecological consulting, with a focus on stationary pollution sources and workplace risk factors. The company holds multiple accreditations and authorizations from the Ministry of the Environment, indicating a reputable position in its sector. Their website reflects a professional service provider targeting businesses and organizations requiring environmental compliance and consulting services. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO and privacy compliance, including GDPR and cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the visible business information and certifications support legitimacy.

G

Games Croatia

gamescroatia.com

61

Games Croatia is an official project website dedicated to promoting the gaming industry and innovation within Croatia. The site serves as a hub for information about the project, its partners, public funding opportunities, and activities related to the Croatian games sector. The website targets game developers, industry stakeholders, and governmental bodies interested in fostering growth and collaboration in the gaming ecosystem. The business model appears to be informational and collaborative, supported by public or governmental funding, positioning itself as a niche regional initiative with a focus on technology and innovation. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google reCAPTCHA for form security, and Google Fonts for typography. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be enhanced. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS and HSTS, uses reCAPTCHA to protect forms, and does not expose sensitive data or vulnerable libraries. However, privacy compliance could be improved by implementing a cookie consent mechanism and publishing explicit security and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and partner affiliations suggest legitimacy. Overall, the site presents a professional and trustworthy front for the Games Croatia project but would benefit from enhanced privacy compliance and clearer domain registration information to strengthen trust and regulatory adherence.

P

Pro-Link

pro-link.pl

47

Pro-Link is a Polish digital marketing and web development company specializing in building PrestaShop e-commerce stores, SEO/SEM services, hosting, and domain registration. Established in 2004, the company has a solid market presence with a focus on small to medium businesses seeking online store solutions and digital marketing support. Their website reflects a professional and consistent brand image, targeting businesses in Poland. Technically, the site is built on WordPress with modern technologies such as Bootstrap, jQuery, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security measures include HTTPS and Google reCAPTCHA on contact forms, but lack advanced security headers and DNSSEC. The site complies well with GDPR, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, Pro-Link demonstrates a mature digital infrastructure with room for security enhancements.

B

Breedveld Staal

breedveldstaal.nl

60

Breedveld Staal is a well-established steel and metal supplier based in the Netherlands, with a business history dating back to 1946 and an active domain since 2003. The company serves industrial and business clients requiring steel products, positioning itself as a trusted B2B supplier in the manufacturing sector. The website reflects a professional business presence with good content quality and clear navigation, targeting business customers in need of steel and metal materials. Technically, the site uses modern JavaScript libraries such as Swiper.js and Fancybox, along with Google reCAPTCHA for form security, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved or explicitly published. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its industry and audience.

F

Faneks

faneks.lv

54

Faneks is a Latvian-based company specializing in providing scientific and analytical equipment for production, analysis, and research. Their offerings include chromatography, mass spectrometry, spectral apparatus, titrators, synthesis equipment, and metrology services. The company targets laboratories, research institutions, and manufacturing businesses, positioning itself as a trusted regional supplier with a diverse portfolio of scientific instruments and services. The website is multilingual, professionally designed, and provides clear navigation and relevant content to its audience. Technical infrastructure is based on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the company.

D

Dan Abrams

dan-abrams.com

53

Dan Abrams is a well-established media entrepreneur and legal analyst with a diversified portfolio including media businesses, television and radio hosting, publishing, and hospitality ventures. The website reflects a professional media presence with good content quality and consistent branding. Technically, the site is built on WordPress using modern themes and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and some protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and trustworthy but could improve in privacy and security transparency.

N

Nationale staalprijs

nationalestaalprijs.nl

46

Nationale staalprijs is a Dutch organization dedicated to promoting and awarding excellence in steel construction projects. The website serves as a platform to showcase nominations, winners, and project submissions related to steel construction within the Netherlands. It targets professionals and companies in the steel construction industry, providing information and recognition to encourage innovation and quality in this sector. The business model appears to be non-profit or industry promotional in nature, focusing on national recognition rather than commercial sales. Technically, the website is built on Drupal 10 CMS and integrates modern web technologies including Google Tag Manager, Google Analytics, YouTube and Vimeo APIs, and Google reCAPTCHA for form security. The site is mobile optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on user registration and login forms to mitigate automated abuse. However, no explicit security headers were detected in the provided content, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is limited as no privacy or cookie policies were found on the homepage content, which could be improved to meet GDPR standards. Overall, the website is professional, trustworthy, and well-targeted to its audience. The main risks relate to privacy compliance and security policy transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to enhance trust and compliance.

D

Dineplan

dineplan.com

10

Dineplan is a South African-focused online restaurant reservation platform offering consumers the ability to book tables, browse menus, and read reviews for over 2,000 restaurants. It also provides reservation software solutions for restaurateurs, positioning itself as a key player in the hospitality sector within South Africa. The website promotes mobile app usage for enhanced user experience and convenience. Technically, the site employs a modern technology stack including Google Maps API, reCAPTCHA, and multiple analytics and marketing tools such as Google Analytics, HubSpot, Hotjar, and TikTok Pixel. Security measures include HTTPS enforcement and CAPTCHA protections on user authentication forms, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data for the domain is a notable gap, reducing trustworthiness from a domain registration perspective. Overall, the site is professionally designed, mobile-optimized, and provides comprehensive privacy and terms documentation, supporting a good security and privacy posture.