Security Directory

P

Platon Technologies, s.r.o.

platon.org

64

Platon Technologies, s.r.o. is a Slovak-based technology company specializing in domain registration, web hosting, server management, SSL certificates, mass mailing, and CDN cloud services. With over 15 years of experience, they operate their own data center infrastructure and provide fully managed services targeting businesses and individuals seeking reliable internet infrastructure solutions. The website is professionally designed, mobile-optimized, and offers clear navigation and comprehensive contact options including email, phone, and contact forms. Technically, the site uses modern frontend libraries such as jQuery, Bootstrap, and Google reCAPTCHA v3 for security on forms. While HTTPS is enforced and no sensitive data is exposed, the absence of explicit security headers and lack of a published security policy or incident response information are areas for improvement. The WHOIS data is malformed and unavailable, which slightly reduces domain trustworthiness, but the overall business presence and transparency on the site support legitimacy. Cookie consent mechanisms and privacy policies are implemented, indicating good privacy compliance. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility.

A

Agencija za lijekove i medicinske proizvode

halmed.hr

52

HALMED is the Croatian Agency for Medicines and Medical Products, serving as the national regulatory authority responsible for the oversight, approval, and monitoring of medicines, medical devices, and homeopathic products. The website provides comprehensive information, publications, news, and resources targeted at patients, healthcare professionals, and industry representatives. It maintains a clear market position as a government healthcare regulator with a medium-sized operational scale and a founding date consistent with its domain registration in 2010. Technically, the website employs a legacy jQuery version alongside modern tracking tools such as Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for form security. The hosting is provided by a Croatian hosting company, and the site uses HTTPS with a good SSL configuration. However, some modernization opportunities exist, including updating JavaScript libraries and implementing security headers and cookie consent mechanisms. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and form protection via reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy and cookie policies, lack of security headers, and use of outdated libraries present moderate risks. The domain WHOIS data aligns well with the website's claims, indicating legitimacy and trustworthiness. Overall, HALMED's website is professional, trustworthy, and serves its regulatory function effectively. Strategic improvements in privacy compliance and technical security would enhance its posture and user trust.

N

NENBRA Transfer Services

taxi-vienna-bratislava.com

51

NENBRA Transfer Services operates a professional luxury taxi transfer business specializing in airport and cross-border transfers between Vienna, Bratislava, Budapest, Prague, and Schwechat. The company targets travelers seeking premium, reliable, and comfortable transportation with fixed pricing and 24/7 availability. Their market position is niche, focusing on high-end clientele with a fleet of luxury Mercedes Benz vehicles. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager and reCAPTCHA for analytics and security. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS and basic security practices, though improvements are recommended in DNSSEC and security headers. Privacy compliance is good with GDPR and cookie policies implemented. Overall, the business demonstrates credibility with consistent WHOIS data and clear contact information.

R

Remote OK

remoteok.com

10

Remote OK is a well-established online platform specializing in remote job listings across various sectors such as programming, design, sales, and customer support. Founded in 2014, it has grown to become a leading job board with over one million remote job listings, targeting remote workers and employers globally. The platform offers premium services, job posting options, and APIs to enhance user experience and business reach. Technically, the website employs modern web technologies including jQuery, Stripe for payments, Google reCAPTCHA for spam prevention, and structured data for SEO optimization. Hosting and DNS services are provided by Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforcement and spam protection, though improvements like DNSSEC and explicit security policies could enhance trust further. Privacy and cookie policies are not explicitly found, indicating an area for compliance improvement. Overall, the site is professional, secure, and trustworthy, serving a broad audience of remote job seekers and employers.

S

Sirma

sirma.com

74

Sirma is a well-established technology company specializing in AI, data, cloud migration, tailored software development, managed IT services, business and IT consulting, cyber security, and system integration. With over 33 years of experience and a presence in more than 170 countries, Sirma serves a broad enterprise audience seeking advanced technology solutions. The company maintains multiple global offices and partners with leading technology providers such as Apple, IBM, Oracle, Microsoft, and VMware. Technically, the website employs modern web technologies including Astro framework, JavaScript libraries like jQuery, Tiny Slider, and Headroom.js, and integrates advanced analytics and tracking tools such as Google Analytics, Amplitude, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good SEO and accessibility features, hosted via GoDaddy with HTTPS enabled. From a security perspective, the site uses HTTPS and Google reCAPTCHA v3 for form protection but lacks DNSSEC and security headers, and does not publish a security policy or incident response contacts. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. No terms of service page was found. Overall, the website is professional, trustworthy, and content-rich, with moderate security posture and privacy compliance. Strategic improvements in DNS security, cookie consent, and security transparency would enhance trust and compliance.

E

Experiment

experiment.com

67

Experiment.com is a well-established crowdfunding platform dedicated to funding and sharing scientific research across diverse disciplines. It serves researchers, scientists, and science enthusiasts by providing a marketplace to fund innovative projects and share findings openly. The platform positions itself as the world's largest open platform for science funding, emphasizing transparency and community engagement. Technically, the website employs modern web technologies including JavaScript frameworks, cloud CDN hosting, and integrates analytics and bot protection tools such as Google Analytics, Mixpanel, Facebook SDK, and Google reCAPTCHA. The site is mobile-optimized with a professional design and clear navigation, supporting a positive user experience. Security-wise, the platform enforces HTTPS, uses reCAPTCHA for bot mitigation, and includes some security headers, though DNSSEC is not enabled and some headers could be added to enhance protection. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the website demonstrates a mature digital presence with strong business credibility and a secure, user-friendly environment.

Morgan Blue is a Belgian quality brand specializing in lubricants, oils, and cleaners, primarily targeting consumers and professionals in the sports care and cycling sectors. The company maintains a professional online presence with a well-structured website, active social media channels, and partnerships with recognized cycling teams and brands. Their business model includes product manufacturing and retail, supported by an official online shop. The website demonstrates compliance with GDPR through a comprehensive cookie consent mechanism and uses modern web technologies such as WordPress, Google Analytics, and Google reCAPTCHA for security and analytics. From a technical perspective, the website is built on WordPress with a moderate performance profile and good mobile optimization. Security measures include HTTPS enforcement and CAPTCHA integration, though additional security headers could enhance protection. The absence of explicit security policies, incident response information, and terms of service pages represents an area for improvement. Notably, WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance and active digital footprint. Overall, the security posture is solid but could benefit from enhanced transparency and additional security controls. The risk assessment highlights the need to verify domain registration and improve contact and policy disclosures to strengthen trust and compliance. Strategic recommendations include implementing security headers, publishing clear security and incident response policies, and ensuring domain registration transparency to support business credibility and customer confidence.

S

SteelMed

steelmed.com

58

SteelMed is a medium-sized Spanish company specializing in the sale and distribution of industrial steel sheeting and coils, offering custom cutting services for various industrial sectors including automotive, construction, and renewable energies. It operates as part of the Hiemesa Group, a well-established steel sector conglomerate. The website demonstrates a professional digital presence with comprehensive product information, certifications, and contact details. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with responsive design and integration of Google services like Maps and reCAPTCHA. Security posture is moderate, with some best practices observed but lacking visible security headers and explicit incident response contacts. Privacy compliance is strong, with clear policies and cookie consent mechanisms. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the overall business credibility and trust indicators are high. Strategic recommendations include enhancing security headers, verifying SSL configuration, and improving incident response transparency.

Lavva Digital Agency is a Portugal-based creative digital agency specializing in branding, website design, and digital activation services. Established in 2015, the agency has built a strong market position with a portfolio of award-winning projects and a focus on delivering innovative digital experiences to ambitious companies. Their services include brand identity, UX design, web development, marketing consultancy, and SEO, targeting a diverse range of industries including technology, energy, hospitality, and healthcare. Technically, the website is built on a modern stack using Next.js and React, optimized for performance and mobile responsiveness. The site employs Google reCAPTCHA v3 for form security and includes a cookie consent mechanism, reflecting good privacy compliance practices. SEO and accessibility features are well implemented, contributing to a professional user experience. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements best practices such as secure forms and consent management. However, explicit security headers and a public security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, Lavva Digital Agency presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in security policy transparency and additional security headers would further strengthen their security posture.

N

Nemocnice České Budějovice, a.s.

csklg.cz

43

The website csklg.cz serves as the official platform for the 1st Czechoslovak Congress of Medical Genetics, scheduled for April 2025 in Luhačovice, Czech Republic. It is organized by Nemocnice České Budějovice and associated professional genetics societies from Czechia and Slovakia. The site provides detailed program schedules, speaker information, venue details, registration instructions, and contact information, targeting medical genetics professionals and researchers. The business model focuses on event organization and professional networking within the healthcare genetics sector. The domain is newly registered in 2024, aligning with the event timeline, and hosted via Active24.

O

OÜ Piksel

piksel.ee

44

OÜ Piksel is an established Estonian software company founded in 1994, specializing in custom software development focused on information systems, databases, registries, and dynamic websites. The company serves businesses and organizations, including local governments and educational institutions, providing services such as software development, implementation, optimization, and hosting. Their market position is that of a trusted, experienced small enterprise with a clear focus on tailored software solutions. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and moderate performance. Security measures include HTTPS and Google reCAPTCHA on forms, but the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the security posture is solid but could be enhanced with additional policies and headers. The website is professional, trustworthy, and free from suspicious content, with clear contact information and partner relationships. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing a vulnerability disclosure policy to improve compliance and trust.

M

MyWebdesign.cz s.r.o.

mywebdesign.cz

52

MyWebdesign.cz s.r.o. is a Czech-based technology company specializing in custom development of extensive e-commerce platforms and mobile applications. With over 20 years of experience, the company serves businesses aiming to scale their online sales, offering tailored solutions including B2B and B2C functionalities, integration with accounting and inventory systems, and 24/7 support. The website reflects a professional and trustworthy brand with strong client testimonials from notable companies such as ZOOT and Plzeňský Prazdroj. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts and Google reCAPTCHA v3 integrated for spam protection. Hosting is managed by REG-ZONER, consistent with WHOIS data. The site is mobile-optimized, fast-loading, and SEO-friendly, though it lacks some advanced security headers and publicly available privacy and cookie policies. From a security perspective, the site uses HTTPS and reCAPTCHA, but the absence of explicit security headers and privacy documentation indicates room for improvement. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, the website presents a high-quality, professional digital presence with minor compliance gaps. Strategic enhancements in privacy compliance and security headers would further strengthen the security posture and regulatory adherence.

MC-Bauchemie Müller GmbH & Co. KG is a leading international manufacturer specializing in construction chemicals and technologies, serving sectors such as concrete industry, infrastructure, and building construction. The company maintains a strong market position with a comprehensive product portfolio including hydrophobic agents, waterproofing solutions, concrete repair products, and admixtures. Their website targets construction professionals and infrastructure developers, providing detailed product information and references. Technically, the website employs modern web technologies including Google Analytics, reCAPTCHA v3, and a consent management platform, ensuring a balance between user experience and privacy compliance. Security measures such as HTTPS and form protections are in place, though some security headers could be enhanced. Overall, the site demonstrates a mature digital presence with good performance and accessibility. The company exhibits strong GDPR compliance with detailed privacy policies and a named data protection officer. Contact information is comprehensive, including multiple channels and social media presence. No critical vulnerabilities or suspicious activities were detected, indicating a secure and trustworthy online environment.

G

Global Services Slovakia s.r.o.

gsgroup.sk

10

Global Services Slovakia s.r.o. is a Slovak-based IT company specializing in the development and implementation of custom web information systems, online applications, eCommerce solutions, and web presentations. With over 18 years of market presence, the company serves a diverse clientele including industrial, financial, and tourism sectors, positioning itself as a reliable provider of tailored software solutions. Their business model focuses on delivering bespoke software development and consulting services, emphasizing quality and client satisfaction. The website reflects a professional and consistent brand image, showcasing client references and detailed service offerings.

Sportaza is an online gambling platform primarily targeting German-speaking users, offering a variety of services including sports betting, live betting, casino games, live casino, jackpots, and virtual sports. The platform appears to be relatively new, with the domain registered in early 2023. The website is built using modern web technologies, notably Angular 14, and leverages Cloudflare DNS services for hosting and security. It integrates Google Tag Manager and reCAPTCHA v3 for analytics and bot protection respectively. However, the site lacks visible privacy policies, terms of service, and contact information, which are critical for user trust and regulatory compliance in the gambling industry. Security measures are partially implemented with HTTPS and reCAPTCHA, but the absence of DNSSEC and security headers indicates room for improvement. Overall, the site is functional and professionally designed but requires enhancements in compliance and security transparency.

D

DialMedia Ltd

omnislots.com

64

Omni Slots, operated by DialMedia Ltd, is a Malta-based online casino platform offering a wide range of casino games including slots, table games, and live casino options. The website targets adult online gamblers globally, providing attractive welcome bonuses and ongoing promotions to engage users. The company holds a valid Malta Gaming Authority license, reinforcing its legitimacy and regulatory compliance. The platform is positioned as a leading online slots casino with a strong portfolio and user engagement features such as VIP clubs and tournaments. Technically, the website is built using modern web technologies including React, integrates multiple analytics and marketing tools like Google Analytics, Hotjar, and Facebook Pixel, and is protected by Cloudflare services. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. Security measures include HTTPS enforcement, reCAPTCHA v3 integration, and password complexity rules, although some improvements like enabling DNSSEC and publishing a security.txt file are recommended. From a security perspective, the platform demonstrates a solid posture with no visible critical vulnerabilities or blocking mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The business credibility is high, supported by transparent WHOIS data, regulatory licensing, and trust indicators such as responsible gaming links and social media presence. Overall, Omni Slots presents a professional, secure, and compliant online gambling platform with a strong market position. Strategic recommendations include enhancing DNS security, formalizing vulnerability disclosure, and strengthening security headers to further improve trust and resilience.

Agentura Alie s.r.o. is a Czech-based professional translation and accounting agency offering a broad range of language services including translations, proofreading, localization, DTP, copywriting, interpreting, and accounting. With over 15 years of market presence and a team of more than 200 translators and native speakers, the company positions itself as a reliable provider of high-quality language and accounting services primarily targeting businesses and individuals in need of such services. The website is well-structured, multilingual, and provides clear contact information and client testimonials, supporting its market credibility. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 to enhance user experience, analytics, and security. The site is mobile optimized and performs moderately well, though some improvements in accessibility and security headers could be made. The use of HTTPS and reCAPTCHA indicates a good baseline security posture. From a security perspective, the site lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. The WHOIS data is privacy protected or unavailable, which is common for small businesses but limits domain age verification and registrant transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security headers would enhance its security posture and user trust.

F

FARMA HOLANY s.r.o.

apartmanyholany.cz

47

Apartmány Holany is a small hospitality business offering family apartments for rent near Česká Lípa, Czech Republic. The website provides detailed accommodation information, contact details, and local tourist tips, positioning itself as a local lodging provider near Milčanský pond. The business is operated by FARMA HOLANY s.r.o., a registered Czech company. The website is professionally designed with responsive features and uses modern web technologies including Google Analytics and reCAPTCHA for security and tracking. However, the absence of WHOIS data limits domain trust assessment. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and incident response information. Privacy compliance is supported by a cookie consent banner and privacy policy in Czech language. Overall, the site is safe, family-friendly, and functional, but could improve transparency and security practices.

M

MHB B.V.

mhb.us

57

MHB B.V. is a well-established Dutch manufacturer specializing in ultra-slim steel windows, doors, and facades, with a heritage dating back to 1667. The company positions itself as a global leader in innovative steel profile systems, offering handcrafted, thermally broken steel solutions tailored to both interior and exterior architectural projects. Their business model emphasizes co-creation and customization, targeting architects, builders, and high-end property developers. The website reflects a professional and consistent brand image, supported by certifications and a strong social media presence. Technically, the website is built on WordPress with modern frameworks and libraries such as Bootstrap, MDBootstrap, and AOS for animations. Performance optimizations are in place via WP Rocket, and SEO is enhanced using Yoast SEO Premium. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA v3 to protect forms from abuse. While no critical vulnerabilities were detected, the absence of certain security headers and a formal security policy page suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, MHB's digital presence is strong, trustworthy, and professionally managed, with minor recommendations to enhance security posture and transparency. The domain registration data corroborates the company's legitimacy and long-standing market presence.

M

MHB B.V.

mhb.eu

57

MHB B.V. is a Dutch family-owned manufacturing company with a 350-year heritage specializing in ultra-slim steel windows, doors, and facade systems. The company positions itself as a niche leader offering high-quality, thermally broken steel profile systems tailored for both interior and exterior architectural projects. Their business model emphasizes craftsmanship, innovation, and full project lifecycle management from design to installation, targeting architects, builders, and discerning clients globally. The website reflects a strong brand identity consistent with their market position and heritage. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap, MDBootstrap, and AOS for animations. Performance optimizations are in place via WP Rocket, and Google Tag Manager is used for analytics and marketing. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. Security measures include HTTPS enforcement and Google reCAPTCHA v3 integration, but additional security headers and explicit security policies are recommended. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit incident response or vulnerability disclosure policies suggests room for improvement in security transparency and readiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, MHB.eu is a professional, trustworthy website representing a reputable manufacturing business with a strong digital presence. Strategic recommendations include enhancing security headers, adding incident response information, and improving accessibility to further strengthen their security posture and compliance.

A

AJI Groupe

exponum.salon

53

Exponum.salon is a French digital platform owned by AJI Groupe SAS that provides innovative digital mini-sites for exhibitors and organizers of salons, exhibitions, and events. The platform enhances visibility and engagement by offering dynamic digital plans, personalized QR codes, and easy-to-manage exhibitor mini-sites. The website is professionally designed using WordPress with Elementor and Yoast SEO, ensuring good SEO and user experience. The platform integrates Google reCAPTCHA v3 for form security and maintains comprehensive legal and privacy documentation, indicating strong compliance with GDPR and related regulations. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy, well-maintained, and targeted at B2B clients in the event technology sector.

C

CEREBRUM 2007

cerebrum2007.cz

51

CEREBRUM 2007 is a Czech non-profit patient organization dedicated to supporting individuals who have suffered brain injuries, including strokes, trauma, and tumors. The organization provides a community center, counseling services, educational workshops, and publishes informational materials to aid patients and their families. The website is well-structured, professionally designed, and targets patients, caregivers, healthcare professionals, and the general public interested in brain injury awareness. It maintains an active presence on multiple social media platforms and offers a newsletter for ongoing engagement. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO, Contact Form 7, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some security headers are missing, and there is no explicit cookie consent banner, which could be improved for better GDPR compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and spam protection on forms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable publicly, likely due to privacy protection, but the website content and business information appear consistent and legitimate. Overall, the site presents a trustworthy and professional digital presence for a small non-profit organization. Strategically, the organization should enhance its privacy compliance by implementing a cookie consent mechanism and consider publishing a security or incident response policy to further build trust. Regular updates and security header improvements will strengthen its security posture. The website effectively supports its mission and audience with clear navigation, relevant content, and community engagement tools.

M

Mikrosvín

mikrosvin.cz

56

Mikrosvín Mikulov is a well-established winery based in the Czech Republic, specializing in producing high-quality wines from the Mikulov wine region. The company emphasizes tradition, terroir, and craftsmanship, with a strong focus on heritage and quality. Their website showcases their history, production methods, key personnel, and numerous prestigious awards, positioning them as a reputable player in the regional wine market. The target audience includes wine consumers, hospitality businesses, and distributors primarily within the Czech Republic. Technically, the website uses modern JavaScript libraries such as jQuery, Google Tag Manager, and Google reCAPTCHA v3, indicating a moderate level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism supporting GDPR compliance. Security posture is good with HTTPS enforced and spam protection on forms, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but could improve transparency and security practices.

T

Ton

ton.com.br

64

Ton is a Brazilian fintech company specializing in payment processing solutions including card machines, mobile payment apps, and digital banking services. Positioned as a competitive player in the Brazilian market, Ton offers low transaction fees and integrated financial products targeting small and medium businesses, individual microentrepreneurs (MEI), and legal entities (PJ). The website demonstrates a professional and modern digital presence with comprehensive product information and customer testimonials. Technically, the site leverages modern frameworks such as Next.js and integrates multiple analytics and marketing tools, hosted on AWS infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security and incident response policies are not publicly available. Overall, Ton presents a trustworthy and well-structured online presence suitable for its target audience.

M

Metalska jezgra Čakovec

metalskajezgra.hr

60

Metalska jezgra Čakovec is a development and educational center focused on the metals industry, providing advanced services such as 3D scanning, polymer and metal 3D printing, and IoT solutions. The center collaborates with regional universities and government bodies, positioning itself as a key regional innovation hub. The website demonstrates a solid technical infrastructure built on WordPress with modern plugins and compliance with GDPR regulations. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

F

Foundation for a Free Information Infrastructure e.V.

ffii.org

50

The Foundation for a Free Information Infrastructure (FFII) is a well-established European non-profit organization advocating against software patents and promoting open standards and free software since 1999. It operates primarily in the technology policy sector, targeting software developers, civil society, and policymakers. The organization is recognized for its influential role in preventing the EU software patent directive and continues active engagement through events, working groups, and public education. Technically, the website is built on WordPress with a modern theme and plugins such as Contact Form 7 and Jetpack, supported by Google reCAPTCHA for form security. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting is managed by Gandi SAS, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing, representing areas for improvement. No incident response or vulnerability disclosure policies are published, which could enhance trust and security posture. Overall, the website is professional, trustworthy, and content-rich, with a strong focus on advocacy and community engagement. Strategic recommendations include enhancing DNS security, publishing security policies, and improving HTTP security headers to strengthen the security posture and compliance.

C

Community Hospital

westernorthosports.com

66

Community Hospital is a well-established healthcare provider specializing in orthopedic and spine care services, located in Grand Junction, Colorado. The hospital offers comprehensive treatment for musculoskeletal diseases and injuries, serving a broad patient base from recreational to elite athletes. The website reflects a strong market position supported by multiple certifications and awards, including recognition as a Joint Commission Center of Excellence for total joint replacement. The business model focuses on specialty healthcare services with a regional reach and a medium-sized organizational footprint. Technically, the website is built on modern web technologies including React and Next.js, hosted on AWS infrastructure, and incorporates accessibility features such as the UserWay widget. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although there is room for improvement in DNS security and explicit security headers. From a security perspective, the site maintains a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and a published security or incident response policy indicates partial compliance with privacy regulations such as GDPR. Contact information is clearly presented, enhancing business credibility and user trust. Overall, the website is professional, trustworthy, and well-maintained, with a high AI score reflecting strong content quality, technical implementation, and business credibility. Strategic recommendations include implementing cookie consent for privacy compliance, enabling DNSSEC, and publishing security policies to further enhance trust and security posture.

J

Johnson & Johnson MedTech

sp-institute.com

71

Johnson & Johnson MedTech operates a professional medical technology portal targeting healthcare professionals in the EMEA region. The website provides product information, complaint handling, and medical information request services, positioning itself as a trusted resource within the healthcare industry. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, Google Tag Manager, and OneTrust for cookie compliance, reflecting a mature digital presence. Security measures such as HTTPS and Google reCAPTCHA are implemented, though additional security headers could enhance protection. The absence of WHOIS data for the subdomain is typical and does not detract from the site's legitimacy given its corporate branding and domain structure. Overall, the site demonstrates a strong security posture and compliance with privacy regulations, supporting its role as a professional healthcare information platform.

The website www.knihkupectvipant.cz operates as an online bookstore specializing in books related to 20th century history and contemporary society, primarily targeting Czech-speaking audiences interested in educational content. The business supports educational initiatives and promotes its offerings through a structured e-commerce platform with clear navigation and product categorization. The site integrates modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, Google Analytics, and Facebook Pixel to enhance user experience and marketing capabilities. Security measures include HTTPS and CAPTCHA for forms, but lack advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presentation appear professional and legitimate. Privacy and cookie policies exist but are basic, with limited GDPR compliance indicators. Contact information is limited to an email address and inquiry forms, with no phone or physical address disclosed. Overall, the site demonstrates a moderate level of digital maturity and security posture, suitable for a small specialized e-commerce business.

G

Gilston Digital SA

miru.digital

49

Miru.digital is a Swiss-based SaaS platform operated by Gilston Digital SA, specializing in PDF document archiving, consultation, and distribution with advanced full-text search capabilities. The company positions itself as a Swiss-made, secure, and easy-to-use solution targeting businesses and organizations requiring efficient document management. The website reflects a professional and consistent brand image with clear pricing tiers and client references, indicating an established niche presence in the document management technology sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes essential security features such as HTTPS and cookie consent management. However, it lacks explicit privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is generally good, with use of Google reCAPTCHA and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and professionally maintained, though it would benefit from enhanced privacy and security disclosures to align with best practices.

K

Krapinsko-zagorska županija

kzz.hr

58

Krapinsko-zagorska županija operates as the official regional government authority for the Krapinsko-zagorska County in Croatia. The website serves as a comprehensive portal providing residents, businesses, and visitors with access to administrative information, news, public tenders, official documents, and cultural and tourism promotion. The site targets a broad audience including local citizens and stakeholders interested in regional governance and services. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, Font Awesome, and various plugins enhancing user experience and functionality. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA for form protection, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source of regional government information.

P

protel systems s.r.o.

protelsystems.cz

60

Protel Systems s.r.o. operates a professional hotel management software platform targeting Czech and Slovak hospitality businesses. The website presents a comprehensive suite of hotel management tools including PMS, online check-in/out, payment solutions, and housekeeping management, positioning itself as a trusted and established player in the regional market. The site is well-designed, mobile-optimized, and includes multiple customer testimonials and certifications, enhancing its credibility. Technically, the website leverages modern technologies such as Google Tag Manager, reCAPTCHA v3, and Cookiebot for privacy compliance, built on the Solidpixels CMS platform. The site demonstrates good SEO and accessibility practices, with fast loading and responsive design. Security measures include HTTPS enforcement, security headers, and spam protection on forms, though explicit security policies and incident response contacts are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear cookie consent and a detailed privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency, which impacts overall trust. Overall, the website is professional and trustworthy from a business and technical perspective but would benefit from improved transparency in domain registration and explicit security governance documentation.

A

AFS Intercultural Programs

globalup.com

60

The Global Up website represents the AFS Intercultural Programs' Global Competence Certificate (GCC) initiative, a well-established non-profit educational program focused on developing global skills through blended learning. The site is professionally designed, content-rich, and targets students, educators, and professionals worldwide. It leverages modern web technologies including WordPress, Gravity Forms, and Google reCAPTCHA to provide a secure and user-friendly experience. The presence of multiple contact channels, social media integration, and downloadable resources enhances engagement and trust. However, the absence of WHOIS registration data for the domain www.globalup.com raises transparency concerns, although the website content and branding strongly align with the reputable AFS organization. Security posture is solid with HTTPS and CAPTCHA protections, but could be improved by implementing explicit security headers and formal incident response policies. Overall, the website is a credible and valuable resource for global competence education with moderate risk due to domain registration opacity.

C

Creative Heads

creativeheads.pl

9

Creative Heads is a small, Poland-based creative agency specializing in graphic design, web development, marketing, and multimedia services primarily serving the Trójmiasto region. The website presents a professional and visually appealing digital presence with a clear focus on creative solutions and client engagement. The technical infrastructure is built on WordPress with modern JavaScript libraries and tracking tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security measures.

T

TESTIMA, spol. s r.o.

testima.cz

44

Testima, spol. s r.o. is a Czech company specializing in nondestructive testing equipment and services, including sales, training, calibration, and servicing. With over 30 years of experience and ISO 9001 certification, it holds a stable market position serving industrial clients. The website is professionally designed, mobile-optimized, and provides clear contact and GDPR compliance information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA to secure user interactions. Security posture is good with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant, and well-maintained.

I

IngenCO2.dk

co2neutralwebsite.fi

55

CO2 Neutral Website is a service operated by IngenCO2.dk, focused on enabling website owners to make their websites carbon neutral by offsetting their carbon emissions through membership fees. The company funds global renewable energy projects certified by the Gold Standard, enhancing sustainable branding for its clients. The website is well-positioned in the niche market of environmental sustainability and digital carbon offsetting, targeting businesses and website owners who want to demonstrate environmental responsibility. Technically, the site uses modern web technologies including Next.js and React, with integrations for analytics and security such as Google Analytics, Google Tag Manager, and reCAPTCHA v3. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although there is room for improvement in privacy compliance and incident response transparency. Overall, the domain registration is consistent with the business claims, enhancing trustworthiness.

I

IngenCO2.dk

minskaco2.se

53

IngenCO2.dk operates the CO2 Neutral Website certification service, enabling website owners to offset their digital carbon footprint by supporting globally recognized sustainability projects certified by Gold Standard. The company positions itself as a trusted provider with over 32,000 websites certified, offering branding benefits and verified CO2 neutrality through annual audits by BDO. The website is professionally designed, multilingual, and leverages modern web technologies including Next.js and Sanity.io CMS, ensuring a fast and responsive user experience. Security measures include HTTPS and Google reCAPTCHA v3, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain www.minskaco2.se raises concerns about domain registration legitimacy, warranting further investigation. Overall, the business demonstrates strong sustainability credentials and market presence, but domain registration transparency should be improved.

H

HOSTINGER operations, UAB

auginulietuva.lt

42

Auginu Lietuvą is a Lithuanian national educational initiative providing a multimedia learning platform focused on pregnancy, childbirth, and newborn care. The platform offers scientifically based information and expert advice aimed at strengthening parenting skills. It targets parents and families in Lithuania and distributes content via a website and mobile applications on Android and iOS. The project is relatively new, founded in 2022, and hosted by HOSTINGER operations, UAB. Technically, the website uses modern web technologies including Vue.js, Google reCAPTCHA v3, and integrates social media SDKs for Facebook and Apple Sign-In. The platform is mobile-optimized and provides a good user experience with clear navigation and multimedia content. Hosting is stable and the domain registration is consistent with the business timeline. From a security perspective, HTTPS is enforced and bot protection via reCAPTCHA is implemented. However, the site lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. Contact information is clearly provided, but no formal security or incident response policies are published. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security headers would enhance the platform's security posture and regulatory adherence.

I

IngenCO2.dk

co2neutralwebsite.com

60

CO2 Neutral Website, operated by IngenCO2.dk, offers a specialized service enabling website owners to certify their websites as carbon neutral by offsetting the CO2 emissions generated by their web traffic. The company leverages Gold Standard certified global projects to finance renewable energy and carbon reduction initiatives, enhancing the sustainability profile of its clients. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js and Google Analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and reCAPTCHA integration, although explicit security policies and incident response details are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business credibility remains high due to transparent certifications and audit declarations.

T

TBS-Team GmbH

tbs-team.de

45

TBS-Team GmbH is a well-established German company specializing in photovoltaic systems, fire protection, and electrical engineering services. With over 20 years of experience and more than 3,000 installed photovoltaic systems, the company holds a strong market position in Bavaria and across Germany. Their website is professionally designed using WordPress and Elementor, featuring clear navigation and contact options including email, phone, and a secure contact form with Google reCAPTCHA v3 integration. The company demonstrates a solid security posture with HTTPS and spam protection, though there is room for improvement in security headers and explicit security policies. Privacy compliance is supported by a comprehensive privacy policy, but cookie consent mechanisms are not evident. Overall, the website reflects a credible and trustworthy business with a focus on renewable energy and technical services.

The website charitycardshop.com currently presents a security verification page that blocks direct access to its main content. This page uses Google reCAPTCHA v3 to verify visitors are not bots, indicating the presence of a Web Application Firewall (WAF) or similar bot mitigation service. Due to this, no business-specific content, contact information, or policies are accessible for analysis. The domain is registered since 2010 with Tucows Domains Inc., showing a consistent registration history and domain status flags that protect against unauthorized transfers. However, the lack of DNSSEC and absence of visible security headers suggest room for improvement in domain and website security configurations. The technical stack includes Bootstrap 5.3.3 and Google reCAPTCHA, but no CMS or other frameworks are detected. Overall, the website's security posture is moderate but limited by the lack of accessible content and policies, resulting in a low AI score and incomplete analysis.

A

Amt für Berufsbildung und Berufsberatung, 9050 Appenzell

appenzeller-lehre.ch

48

The website 'Arbeitswelt Innerrhoden' serves as an official regional platform promoting apprenticeships and vocational training in Appenzell Innerrhoden, Switzerland. It is affiliated with the Amt für Berufsbildung und Berufsberatung, indicating a government-backed educational initiative. The site targets students, parents, apprentices, and vocational trainers, providing information, blog content, event announcements, and a newsletter subscription service. The business model focuses on information dissemination and regional educational promotion. Technically, the site is built on WordPress 6.8.3 with common plugins such as Contact Form 7 and Google reCAPTCHA for form security. It uses modern JavaScript libraries like jQuery and Slick Carousel for UI enhancements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Analytics are handled via Koko Analytics with minimal user tracking. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to protect forms. However, it lacks standard security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, serving its regional educational purpose effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

T

Tower Center Rijeka

tower-center-rijeka.hr

10

Tower Center Rijeka is a well-established retail shopping center located in Rijeka, Croatia, founded in 2007. The website presents a comprehensive overview of the center's offerings, including over 135 stores, megastores, a multiplex cinema, restaurants, and extensive parking facilities. The business targets general consumers, families, and shoppers seeking retail and leisure experiences. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and providing up-to-date news and promotional content. Technically, the site employs modern web technologies such as Google reCAPTCHA v3, Google Tag Manager, Facebook Pixel, and is hosted on DigitalOcean, ensuring reliable performance and security. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the site reflects a credible and trustworthy business with a good digital presence.

Civilnodruštvo.hr is a Croatian non-profit portal operated by the Nacionalna zaklada za razvoj civilnog društva, focused on civil society, activism, and social initiatives. Established in 2004, it serves as an information hub connecting various actors in civil activism and promoting civil initiatives. The website offers news, event announcements, educational materials, and multimedia content relevant to its audience. Technically, the site is built on WordPress with a mature plugin ecosystem including Yoast SEO, Contact Form 7, and social sharing tools, ensuring good SEO and user engagement. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and no explicit security policies are published. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy, professional, and well-positioned in its niche.

B

Úvod

bonavitabody.cz

45

Bonavita.cz operates as a loyalty program platform primarily targeting consumers in the Czech Republic. The website facilitates the collection of loyalty points through a dedicated mobile application and allows users to redeem these points for rewards. The business model centers on incentivizing customer engagement and repeat purchases through partnerships with various retail brands. The site demonstrates a consistent brand presence and integrates social media channels to enhance user engagement. From a technical perspective, the website employs a modern frontend technology stack including Bootstrap 4.3.1, jQuery, Google reCAPTCHA v3, and various UI enhancement libraries such as Slick Carousel and AOS. The site is mobile-optimized and includes basic SEO and accessibility features. SSL is properly configured, ensuring secure communications. Security posture is moderate with HTTPS enforced and bot protection via reCAPTCHA. However, the absence of advanced security headers and explicit security policies indicates room for improvement. Privacy compliance is addressed through a cookie consent mechanism and a basic cookie policy page, aligning with GDPR requirements. No direct company contact emails or phone numbers are provided, which may impact user trust and support accessibility. Overall, the website presents a legitimate and functional loyalty program platform with a moderate security and privacy posture. The lack of WHOIS data due to privacy protection is common for small businesses and does not raise immediate concerns. Strategic enhancements in security headers, accessibility, and transparent contact information would strengthen the platform's trustworthiness and compliance.

T

Tokić d.d.

tokic.hr

52

Tokić d.d. is a leading regional distributor and retailer of auto parts and related equipment with over 35 years of tradition. The company operates a large network of physical stores across Croatia and Slovenia, complemented by a comprehensive online webshop. They also provide educational services through their certified training center and operate an Auto Check Center for vehicle servicing. The website reflects a mature business with a strong market position and a broad target audience including mechanics, drivers, and automotive enthusiasts. Technically, the site is built on WordPress with modern libraries and frameworks, offering good mobile optimization and SEO practices. Security posture is strong with HTTPS, reCAPTCHA integration, and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is well addressed with clear policies and user consent. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

K

Kommunion AS

mycornerstone.com

58

The website mycornerstone.com serves as a secure sign-in portal for the Cornerstone platform, a technology service provided by Kommunion AS. The platform offers user authentication via username/password and BankID, targeting business users requiring secure access. The site integrates Google reCAPTCHA v3 to mitigate automated abuse and leverages a modern frontend stack including Bulma CSS and FontAwesome icons. Hosting is via AWS Cloudfront CDN, ensuring reliable content delivery. However, the site lacks visible privacy and cookie policies, and no terms of service or incident response information is provided, which may impact compliance and user trust. Security practices are generally sound with HTTPS enforced and clientTransferProhibited domain status, but DNSSEC is not enabled and security headers are absent from the HTML content. Overall, the site is functional and moderately secure but would benefit from enhanced compliance documentation and security header implementation.

P

Partnerství, o.p.s.

stezky.cz

55

Cyklisté vítáni is a Czech nationwide certification system focused on promoting cyclist-friendly accommodations, dining, campsites, and tourist destinations. Managed by Partnerství, o.p.s., the organization supports sustainable cycling tourism by certifying and promoting quality services tailored to cyclists. The website serves as an information hub with maps, tips, events, and partner listings, targeting cycling tourists and service providers. Technically, the site is built using modern frameworks like Astro, integrates Google Analytics, Facebook Pixel, and uses Google reCAPTCHA for form security. It is well-optimized for mobile and SEO, providing a fast and accessible user experience. Security posture is solid with HTTPS and privacy compliance, though it lacks explicit security policy and incident response details. Overall, the site is trustworthy, professional, and aligned with its business goals.

C

Colonnade Insurance S.A.

colonnade.sk

67

Colonnade Insurance S.A. is a Slovak insurance company specializing in non-life insurance products for both individuals and businesses. Their offerings include property, liability, vehicle, accident, cyber, and travel insurance. The company maintains a strong market position in Slovakia, supported by professional branding, customer testimonials, and industry awards. The website is well-designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their target audience. Technically, the site uses modern web technologies including Google Tag Manager, reCAPTCHA, and CookieHub for privacy compliance, and is built on a CMS platform likely Kentico Kontent. Security posture is good with HTTPS enforced and bot protection, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies. Overall, the site reflects a credible and trustworthy insurance provider with a mature digital presence.