Security Directory

B

Bushman

bushman.cz

67

Bushman.cz is a well-established Czech e-commerce retailer specializing in outdoor and casual clothing and accessories for men, women, and children. Founded in 1999, the company has expanded its presence across multiple European countries with localized domains. The website offers a comprehensive product catalog, including clothing, footwear, and camping accessories, supported by customer service and newsletter subscription features. Technically, the site leverages modern analytics, marketing tools, and a secure HTTPS infrastructure with Cloudflare DNS and CDN services. Security posture is solid with secure login forms and cookie consent management, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site presents a professional, trustworthy, and user-friendly experience with extensive tracking and marketing integration.

P

PENTA CZ

penta.cz

60

PENTA CZ operates as a Czech Republic-based e-commerce retailer specializing in a broad range of products including household goods, garden supplies, tools, and electronics. The website offers a loyalty program and expert advice, targeting both consumers and businesses. The platform is well-structured with extensive product categories, indicating a mature retail operation with a medium-sized market presence. Technically, the website employs modern JavaScript libraries such as jQuery and integrates Google Tag Manager, Google Analytics, and reCAPTCHA for analytics and security. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. However, the absence of a visible privacy policy and security headers suggests areas for improvement in compliance and security hardening. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, which limits domain trust assessment. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced transparency and security practices. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

V

VUCH s.r.o.

vuch.cz

62

VUCH s.r.o. operates a Czech-based e-commerce platform specializing in colorful and original fashion accessories including handbags, backpacks, wallets, and other fashion items. The company targets primarily women seeking unique and playful designs, positioning itself as a well-known brand in the Czech retail market with a decade of experience. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and tracking technologies, including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and appropriate security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not currently undermine the evident business operations. Overall, the site is trustworthy, GDPR compliant, and safe for general audiences.

G

GREJT s.r.o.

grejt.sk

54

GREJT s.r.o. operates an established e-commerce platform in Slovakia, specializing in consumer electronics, household appliances, smart home devices, and related products. The website presents a professional and user-friendly interface with clear navigation and comprehensive product categories. The company targets general consumers in Slovakia, offering fast delivery and customer support services. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and integrates marketing and analytics tools such as Facebook Pixel and Google Analytics. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, the website demonstrates a mature digital presence with good business credibility and trust indicators.

H

HORNBACH Baumarkt AG

hornbach.cz

66

HORNBACH Baumarkt AG operates a leading DIY and home improvement e-commerce platform in the Czech Republic, targeting both hobbyists and professional builders. The website offers a broad range of products from flooring to garden supplies and tools, supported by physical stores and project planning resources. The company maintains a strong market position with consistent branding and active social media presence. Technically, the site uses modern web technologies including StencilJS, Usercentrics for consent management, and Dynatrace for performance monitoring, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforced and consent-based loading of third-party services, though explicit security headers and detailed privacy policies could be improved. Overall, the site is professional, user-friendly, and trustworthy, though the absence of WHOIS data slightly reduces domain trustworthiness.

ZOOT.cz is a well-established Czech e-commerce platform specializing in fashion retail, offering a wide range of clothing, footwear, and accessories for women, men, and children. The website demonstrates a mature digital presence with extensive product categorization and brand partnerships, targeting a broad general audience. Technically, the site employs modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Microsoft Clarity, indicating a strong focus on user behavior analysis and marketing optimization. Security-wise, the site enforces HTTPS and uses asynchronous loading of tracking scripts, but lacks visible security headers and published security policies, which are areas for improvement. The absence of publicly available WHOIS data suggests privacy protection, common for commercial entities, and the website content is accessible without WAF or blocking mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

A

Alensa Medical s.r.o.

alensa.cz

60

Alensa Medical s.r.o. operates www.alensa.cz, a Czech Republic-based e-commerce platform specializing in contact lenses, lens solutions, sunglasses, and prescription glasses. The company targets consumers seeking optical products with a promise of fast delivery and a wide product range. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized retail business model focused on the Czech market. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, Google reCAPTCHA, Facebook Pixel, Visual Website Optimizer, and PostHog analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security is robust with HTTPS enforced and use of anti-bot measures, but lacks explicit security headers and documented security policies. The security posture is good, with no detected vulnerabilities or blocking mechanisms. However, the absence of visible privacy and cookie policies reduces compliance confidence. WHOIS data is unavailable due to CZ NIC privacy norms, but the website's business information is consistent and trustworthy. Overall, the site is safe for general audiences and professionally managed. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, improving accessibility, and maintaining transparency in data protection practices to strengthen user trust and regulatory compliance.

C

CPU s.r.o.

sniperdesign.cz

51

SniperDesign.cz, operated by CPU s.r.o., is a specialized development agency focused on custom modifications and enhancements for e-commerce platforms, primarily Upgates and Shoptet. The company positions itself as a gold partner with extensive experience since 2016, offering services ranging from web design and e-shop construction to programming, integrations, and automation. Their unique advantage includes operating their own e-shop, Mega Detail, which provides practical insights into e-commerce challenges. Technically, the website employs modern web technologies including Google Fonts, jQuery, Bootstrap, Swiper.js, and integrates analytics tools such as Google Analytics 4 and Facebook Pixel. The site is well-structured, mobile-optimized, and provides multiple contact channels with robust form validation and anti-spam measures. Security posture is solid with HTTPS enforced and client-side validations, though additional security headers could enhance protection. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy page found. WHOIS data is unavailable, which slightly impacts trust but the website content and business information appear professional and legitimate.

Assiste is a Brazilian company specializing in fleet maintenance systems and related technical advisory services. Their website presents a professional image with a clear focus on B2B clients needing fleet management and industrial maintenance solutions. The site offers multiple contact channels including a contact form protected by Google reCAPTCHA, email addresses, phone numbers, and a physical address in Piracicaba, Brazil. The company integrates Google Maps for location display and maintains a LinkedIn presence, indicating a moderate digital maturity. Technically, the site uses a mix of modern and legacy technologies including Bootstrap and an older jQuery version, with Google Analytics and Tag Manager for tracking. Security measures include HTTPS and reCAPTCHA, but lack explicit security headers and use of outdated libraries pose some risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in security and privacy transparency.

Xemel, operated by Trayto a.s., is a specialized SaaS platform focused on feed management for e-commerce businesses. It offers a comprehensive suite of tools including online XML/CSV feed editing, custom feed creation, AI-generated product descriptions, supplier feed integration, and bidding management on comparison shopping engines. The company targets e-shops, agencies, and firms seeking to optimize their product data feeds and advertising efforts, with a strong presence in the Czech and Slovak markets. The website demonstrates a professional and consistent brand image, supported by numerous client testimonials and partnerships with major e-commerce platforms and marketplaces. Technically, the website is well-structured with modern HTML5 and CSS3 technologies, optimized for mobile devices and fast performance. While no CMS or hosting provider is explicitly identified, the site shows good SEO and accessibility practices. Security-wise, the site enforces HTTPS and employs feed URL hashing for obscurity, but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. The absence of WHOIS data reduces domain registration trust but does not detract from the business legitimacy evidenced by client references and partnerships. Overall, Xemel presents a mature digital presence with strong business credibility and a solid technical foundation. Security posture is good but can be improved by implementing standard security headers and explicit privacy consent mechanisms. The company should also consider publishing incident response contacts and data protection officer details to enhance transparency and compliance.

A

Ad Alliance GmbH

winario.de

61

winario.de is an official online sweepstakes platform affiliated with major German TV channels RTL and VOX, operated by Ad Alliance GmbH. It offers users free participation in TV-related contests and votings, providing chances to win cash prizes, trips, and electronics. The platform targets a general German-speaking audience interested in TV sweepstakes and interactive contests. Technically, the site employs modern JavaScript libraries including jQuery and Swiper.js, integrates Google Tag Manager for analytics, and uses Sourcepoint for GDPR-compliant consent management. Hosting is managed via EuroDNS nameservers, indicating a professional infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are not clearly presented. Privacy compliance is strong with dedicated privacy and cookie policies accessible. Business credibility is high due to official affiliations and consistent branding. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of blocking or malicious content.

M

MJM agro, a. s.

mjm.cz

68

MJM agro, a. s. is a Czech agricultural company established in 1997, specializing in precision agriculture systems such as Prefarm, along with a broad portfolio of agricultural products including crop protection agents, fertilizers, seeds, animal feed, and energy products. The company serves agricultural enterprises, farms, and small growers, positioning itself as a reliable partner in the agricultural sector. It is part of the Reticulum Holding group, indicating a stable corporate structure. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, and Cookiebot for cookie consent management. It uses Google Analytics and Seznam.cz retargeting for marketing and analytics purposes. The site is mobile responsive and has good SEO practices, although some accessibility features could be enhanced. Security-wise, HTTPS is enforced and reCAPTCHA is used for bot protection, but the absence of security headers and outdated JavaScript libraries suggest room for improvement. The security posture is solid but not exemplary, with no critical vulnerabilities detected in the visible content. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy policy documentation. However, the lack of WHOIS data for the domain reduces trust slightly, although the website content and business information appear legitimate and professional. Overall, MJM agro's website is a well-structured, professional platform that effectively supports its business objectives. Strategic improvements in security headers, updated libraries, and enhanced accessibility would further strengthen its digital maturity and trustworthiness.

HS-RS operates the website www.bnhelp.cz, providing specialized GIS and remote sensing solutions primarily for public administration and companies managing engineering networks in the Czech Republic. Their offerings include software applications for optical network management, metadata cataloging, and various GIS tools tailored to local government and infrastructure needs. The website is built on WordPress and integrates Google Analytics and Tag Manager for tracking. Contact information is clearly provided, including a Czech phone number, email, and physical address, supporting business credibility. However, no privacy or cookie policies are present, and WHOIS data for the domain is unavailable, which limits trust assessment from a domain registration perspective. The website content is professional and relevant to its niche audience.

A

AGRI-PRECISION s.r.o.

agri-plan.cz

56

AGRI-PRECISION s.r.o. operates the AGRI-PLAN website, offering specialized software for planning agricultural land block operations and machinery navigation. The company targets agricultural businesses primarily in the Czech Republic, providing tools to optimize economic and ecological farming practices in compliance with local legislation. The website is professionally designed with clear navigation, multimedia content, and multilingual support (Czech and English). The business model is SaaS-based, focusing on niche agricultural technology solutions. Technically, the site uses modern JavaScript libraries, Google Analytics, Microsoft Clarity, and reCAPTCHA for bot protection. The site is mobile-optimized and SEO-friendly, though accessibility could be improved. Security posture is good with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit security policies. WHOIS data is unavailable, which reduces transparency but the website's professional presentation and contact details support legitimacy.

Studierendenwerk Dortmund AöR is a regional non-profit organization providing essential student services including financial aid (BAföG), housing, food services (Mensa), and counseling for seven universities in and around Dortmund, Germany. The website reflects a well-established institution with a clear focus on supporting students' academic and social needs. The presence of multiple university logos and social media channels reinforces its credibility and community engagement. Technically, the site is built on TYPO3 CMS, employs privacy-conscious Matomo analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-respecting tracking, though it lacks explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

The website at assemble.com/lander is currently a minimal placeholder or parking page with very limited content. It primarily serves advertising scripts from Google Adsense and lacks any substantive business information, contact details, or user engagement features. The domain itself is very old, registered since 1996 with GoDaddy.com, LLC, which suggests legitimacy in terms of domain ownership but the website does not reflect an active or mature business presence. Technically, the site uses basic JavaScript and CSS assets but lacks modern SEO, accessibility, and security best practices. There are no privacy or cookie policies, no contact forms, and no visible security headers, which indicates a low security posture and poor compliance with privacy regulations. Overall, the site appears to be a parked domain or under development rather than a fully operational business website.

A

Antica Terra

lillianwinery.com

43

Lillian Winery operates as a premium wine brand associated with Antica Terra, focusing on direct-to-consumer wine sales and exclusive membership experiences. The website serves as a digital storefront and membership portal, targeting wine enthusiasts and hospitality clientele. The brand positions itself in the niche hospitality sector with a focus on quality and customer engagement through wine club memberships and curated experiences. Technically, the website is built on WordPress with integration of Commerce7 for e-commerce, Klaviyo for marketing automation, and Google Analytics for visitor tracking. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and formal policies such as privacy and cookie notices. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional branding and linkage to Antica Terra mitigate some risk. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

F

FUNKE Services GmbH

funkemediasales.de

56

FUNKE MediaSales operates as the primary media sales arm of the FUNKE Mediengruppe, offering comprehensive crossmedia advertising solutions across digital, print, and audio channels. The company targets businesses and marketing professionals seeking regional and national advertising reach. The website demonstrates a mature digital infrastructure built on WordPress with modern frameworks and includes advanced cookie consent management and tracking technologies. Security posture is solid with HTTPS and consent-based loading of tracking scripts, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website softformance.com is currently inaccessible, returning a 403 Forbidden error page indicating restricted access. Due to the lack of accessible content, no business descriptions, contact information, or policies are available for analysis. The domain is registered since 2013 with GoDaddy.com, LLC and uses Cloudflare DNS, but DNSSEC is not enabled. No security headers or scripts are detected in the HTML content. The site does not provide privacy, cookie, or terms of service policies, nor any contact or incident response information. Overall, the website's digital presence is minimal and blocked, limiting the ability to assess its business operations or security posture comprehensively.

J

Juizi

juizi.com

54

Juizi is a small technology service provider specializing in website building, hosting, and maintenance, primarily targeting businesses and non-profits. Established in 1999, the company leverages the Plone CMS platform combined with a React frontend to deliver secure and maintainable websites. Their market position is strengthened by long-term client relationships and a reputation for professionalism and technical expertise. The website content is well-structured, professional, and includes client testimonials that enhance trust. Technically, the site uses modern frameworks and is moderately optimized for performance and mobile devices, though accessibility could be improved. Security posture is good with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, Juizi presents a credible and trustworthy business with room for improvement in security and privacy transparency.

cloud19 web solutions & services is a small Austrian company specializing in professional, customized websites for small and medium-sized enterprises, startups, and sole proprietors. With over 20 years of experience, the company offers fixed-price business websites, CMS development primarily using Plone CMS, and hosting services. Their market position is strengthened by personalized customer service, award-winning expertise, and a focus on transparency and no binding contracts. Technically, the website is built on a modern stack including Python, Plone CMS, PostgreSQL, Docker, and Bootstrap, with privacy-conscious analytics via Matomo. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be managed within their own infrastructure, ensuring control and reliability. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected and could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website and business present a trustworthy, professional image with clear contact information and transparent service offerings. The lack of WHOIS data due to privacy protection limits domain trust analysis but is justified for this business type. Strategic recommendations include enhancing security headers and continuous monitoring of third-party components.

Rohberg is a small Swiss technology company specializing in web solutions using Plone CMS, Python, React, and Svelte. The company offers comprehensive services including website creation, backend and frontend development, app integration, and customized search functionalities. The business targets creative professionals and organizations primarily in Zurich, emphasizing collaborative and modern web development approaches. The website reflects a professional and consistent brand image with active community involvement in the Plone ecosystem. Technically, the website is built on a modern stack with Plone as the CMS, leveraging Python and popular frontend frameworks. It uses privacy-conscious analytics (Matomo) alongside Google Tag Manager. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Performance is moderate, with good SEO and meta tag usage. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies and no consent mechanisms. Contact information is available via a contact page but lacks direct email or phone contacts on the main site. Overall, Rohberg's website demonstrates a solid technical foundation and credible business presence with room for improvement in privacy compliance and security best practices. The risk level is low, with no critical issues detected.

Q

Quaive

quaivecloud.com

42

Quaive is a specialized technology company offering a secure social collaboration platform designed to integrate document sharing and communication into a unified digital workplace. The company targets businesses and organizations seeking modern intranet and collaboration solutions, positioning itself as a niche provider with a focus on EU-hosted services and compliance. Quaive's offerings include social intranet, digital workplace, knowledge management, and community platform solutions, supported by a tiered SaaS subscription model. The website reflects a mature business established in 2015, with professional branding and clear market positioning. Technically, the website is built on WordPress with multilingual support via WPML and performance optimizations through NitroPack. It employs modern web technologies and demonstrates excellent mobile optimization, accessibility, and SEO practices. Hosting and domain registration are consistent with the company's European focus, using a reputable registrar and EU hosting implied by content. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, it lacks DNSSEC and some recommended security headers such as Content-Security-Policy and X-Content-Type-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Contact information is provided primarily via physical addresses and a demo request form, with no explicit security or incident response policies published. Overall, Quaive presents a professional and trustworthy online presence with a solid technical foundation and good security posture. Strategic improvements in cookie consent, security headers, and visible security policies would enhance compliance and trust further.

E

Enfold Systems

enfoldsystems.com

58

Enfold Systems is a specialized technology company focused on providing solutions and services around the Plone open-source content management system. Their offerings include software products, hosting, consulting, and support tailored to organizations seeking robust CMS solutions. The company has a long-standing presence since 2004 and positions itself as a premier Plone expert with a strong emphasis on open-source technologies and client partnerships. Technically, the website is built on the Plone CMS platform and leverages modern web technologies such as jQuery, RequireJS, Bootstrap, and Google Fonts. The site is mobile-optimized and demonstrates good design quality and user experience. Hosting and DNS services involve Cloudflare and Squarespace Domains, providing a reliable infrastructure. Google Analytics is used for visitor tracking, though no explicit cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, indicating gaps in privacy compliance. Contact information is limited to a contact form without direct emails or phone numbers, which may affect user trust and accessibility. Overall, the website is professional, trustworthy, and technically sound but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen its security and compliance posture.

K

kitconcept GmbH

kitconcept.com

65

kitconcept GmbH is a specialized service provider focused on delivering high-quality open source web and intranet solutions, primarily leveraging the Plone CMS platform. Their market position is that of a niche expert and active contributor to the Plone community, serving research institutions, universities, government agencies, and public organizations. The company offers services including website development, intranet solutions, open source contributions, and consulting. Founded in 2014 and based in Germany, kitconcept GmbH maintains a professional and content-rich website that reflects their expertise and client base. Technically, the website is built on modern technologies including Plone 6 and React-based Volto frontend, hosted by Hetzner Online GmbH with DNS managed via Cloudflare. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by enabling DNSSEC and adding explicit security headers. Privacy compliance is generally good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the security posture is mature with no critical vulnerabilities detected. The website shows strong business credibility through client logos, testimonials, and detailed project case studies. Recommendations include enhancing DNS security, implementing security headers, and adding cookie consent to improve GDPR compliance. The site is safe for general audiences with no adult or questionable content detected.

S

Simples Consultoria

simplesconsultoria.com.br

56

Simples Consultoria is a Brazilian technology consulting company specializing in Plone CMS solutions, offering services such as technical consulting, hosting, development, and specialized training. The company targets organizations and professionals seeking expertise in Plone, positioning itself as an experienced and trusted provider with over 20 years in the market. The website reflects a professional digital presence with clear navigation and relevant content for its audience. Technically, the site is built on Plone 6 with React and uses Cloudflare for DNS and CDN services, ensuring good performance and security through HTTPS. However, the site lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. Analytics tools like Google Tag Manager and Cloudflare Insights are used for user tracking, with moderate tracking levels and limited privacy compliance indicators. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

atalanda

atalanda.com

66

atalanda.com is a well-established German e-commerce platform founded in 2012, offering a broad range of over 2 million products across categories such as fashion, beauty, toys, electronics, books, home and garden, pets, sports, food, and baby products. The platform targets general consumers in Germany and positions itself as one of the leading online retailers with over 150,000 satisfied customers and strong ratings on Idealo and Google. The business model aggregates products from multiple retailers, providing a marketplace experience. Technically, the website employs modern technologies including Vue.js, Stripe for payments, Google reCAPTCHA for bot protection, and Amazon Cloudfront CDN for content delivery. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are found. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and technically mature, with room for minor security enhancements.

M

Max-Planck-Gesellschaft zur Förderung der Wissenschaften

max-planck.de

62

The Max-Planck-Gesellschaft website represents a leading German non-profit research organization focused on fundamental scientific research across 84 institutes. The site targets researchers, academics, students, and the general public interested in science. It offers extensive information on research, career opportunities, publications, and innovation initiatives. Technically, the website employs modern JavaScript frameworks, a modular AMD architecture, and a professional CMS (JustRelate CX Cloud). It is hosted on infrastructure consistent with the organization's domain and uses HTTPS with cookie consent managed by Usercentrics. Security posture is strong with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages in the provided content, but cookie consent mechanisms are in place. Overall, the website is professional, trustworthy, and well-structured, reflecting the organization's high credibility and market position.

M

MONOGRAM PARIS

monogram-paris.com

48

MONOGRAM PARIS appears to be an artistic or portfolio website hosted on the Cargo Collective platform, showcasing visual content likely related to art or design. The website is professionally designed with a modern aesthetic and good mobile optimization, but lacks substantive business information, contact details, and privacy or cookie policies. The technical infrastructure is based on Cargo3 framework with standard HTML, CSS, and JavaScript, hosted by Cargo Collective. Security posture is basic with HTTPS enabled but no advanced security headers or DNSSEC. The WHOIS data is suspicious due to a future domain creation date, which raises concerns about domain legitimacy. Overall, the website is functional and visually appealing but lacks critical compliance and security features.

T

Time and Date AS

timeanddate.no

69

Time and Date AS operates the Norwegian localized website timeanddate.no, providing comprehensive services related to time, date, calendars, weather, and astronomy. The site targets Norwegian-speaking users and offers tools such as world clocks, time zone converters, calendar generation, weather forecasts, and astronomy data. The business model is primarily advertising-supported with optional paid supporter services for an ad-free experience and exclusive content. The company has an established market presence since 1995 and maintains consistent branding and high-quality content. Technically, the website employs modern web technologies including JavaScript, Google Publisher Tags, Prebid.js for header bidding, and GDPR-compliant consent management platforms. The site is mobile-optimized with good SEO and accessibility features, though some advanced security headers could be improved. Performance is moderate, balancing rich content with advertising scripts. From a security perspective, the site enforces HTTPS and uses consent management for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not present, which could be enhanced to improve trust and readiness. Advertising practices are transparent with reputable ad networks and tracking services. Overall, the website presents a low-risk profile with strong content quality and compliance posture. Strategic recommendations include implementing additional security headers, publishing a dedicated security policy, and maintaining regular audits of third-party scripts to sustain security and privacy standards.

T

Time and Date AS

timeanddate.com

66

Timeanddate.com is a well-established website operated by Time and Date AS, providing comprehensive and reliable information and tools related to time, time zones, calendars, weather, and astronomy. The site targets a broad audience including individuals and professionals worldwide who require accurate and up-to-date time and date data. It operates a business model primarily supported by advertising with optional paid supporter services for enhanced user experience. The website demonstrates a strong market position as a leading global provider in its niche. Technically, the website employs modern JavaScript frameworks, ad management technologies including Google Publisher Tags and Amazon APS, and a consent management platform to ensure GDPR compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly, delivering a good user experience with fast loading times. The use of multiple ad networks and tracking services is balanced with user consent mechanisms. From a security perspective, the site enforces HTTPS and implements best practices for secure forms and data handling. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not evident in the HTML and could be improved. The absence of a published security policy or incident response contact is noted. The WHOIS data is unavailable, which is unusual but does not currently detract from the site's legitimacy given its professional presentation and long-standing operation. Overall, timeanddate.com presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and considering a security.txt file to improve transparency and trust.

4

4P.de

4players.de

72

4P.de is a well-established German online media portal specializing in gaming news, reviews, previews, and hardware coverage for PC and consoles including PS5, Xbox, Switch, and VR. The site targets gaming enthusiasts primarily in the German-speaking market and operates under the FUNKE Mediengruppe umbrella, a reputable media conglomerate. The business model is based on advertising revenue complemented by subscription options for ad-free experiences. The website demonstrates a high level of professionalism with consistent branding, excellent content quality, and active engagement through social media channels.

FeWo-Touristik GmbH operates a specialized online platform for vacation rental listings, focusing on Ferienwohnungen and Ferienhäuser primarily in Germany and Europe. The company manages over 10,000 listings and offers niche portals targeting dog owners and regional markets such as Sylt. The business model emphasizes direct control for property owners without commission fees, positioning the company as a trusted intermediary in the hospitality sector. Technically, the website is built with standard HTML5 and CSS3, is mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. WHOIS data confirms domain legitimacy with consistent registration details and no privacy protection, aligning with the company's transparency. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

M

Monteurzimmer.at

monteurzimmer.at

71

Monteurzimmer.at is a well-established online platform specializing in affordable accommodation listings for workers and travelers in Austria. The website offers over 1,000 budget-friendly lodging options with direct contact to landlords and free mediation services, positioning itself as a key player in the hospitality sector targeting a niche audience of monteurs and budget travelers. The platform supports multiple languages, enhancing accessibility for diverse users. Technically, the site employs modern web technologies including Google Maps API and Google Tag Manager, ensuring functional and analytical capabilities. Security measures such as HTTPS and multiple security headers are implemented, reflecting a good security posture. Privacy and cookie policies are comprehensive and GDPR compliant, indicating strong privacy awareness. However, the absence of WHOIS data due to privacy protection slightly reduces trustworthiness but is common for this business type. Overall, Monteurzimmer.at demonstrates a professional, secure, and user-friendly online presence with moderate to good technical maturity.

F

FUNKE Mediengruppe GmbH & Co. KGaA

funke.fun

51

FUNKE FUN is a German media portal operated by FUNKE Mediengruppe GmbH & Co. KGaA, offering daily free sweepstakes, browser games, and discount vouchers from trusted brands. The website targets a broad general audience interested in entertainment and savings. It leverages partnerships with well-known brands such as HÖRZU and Tchibo to provide engaging content and promotional offers. Technically, the site uses modern JavaScript frameworks including Alpine.js and Livewire, integrates consent management tools, and employs Google Tag Manager for analytics. The site is mobile optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses security headers, and manages cookie consent effectively, though it lacks explicit security policy or incident response contact details. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information, though improvements could be made in providing direct contact channels and terms of service documentation.

A

Actency

actency.fr

63

Actency is a leading French digital agency specializing in Drupal-based web solutions, cloud applications, and digital factory services. With a team of 250 experts and over 18 years of experience, the company positions itself as a market leader in Drupal solutions, serving a broad range of clients including government, media, and sports federations. Their business model focuses on consulting, technical assistance, project management, and cloud & DevOps services, targeting businesses seeking scalable and innovative digital platforms. The company maintains multiple offices across France, reinforcing its regional presence and client accessibility. Technically, the website is built on Drupal 9 and incorporates modern web technologies such as Matomo for analytics, Hubspot for forms, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the website's professional content, client references, and active social media presence support its legitimacy. Privacy and cookie policies are comprehensive and GDPR-compliant, indicating a strong commitment to data protection. Overall, Actency demonstrates a robust digital presence with a focus on quality, security, and compliance.

FUNKE Wärmeaustauscher Apparatebau GmbH is a German-based specialist company focused on the development and production of industrial heat exchangers. The website presents a professional and consistent brand image targeting industrial clients and businesses requiring heat exchanger solutions. The company positions itself as a specialist in manufacturing within the industrial sector. Technically, the website is built on TYPO3 CMS and includes JavaScript tracking from sst.hydac.com, hosted on EuroDNS nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information and incident response details are not found, limiting direct communication channels. Overall, the website is safe for general audiences and professionally designed but would benefit from enhanced security and privacy transparency.

I

InWIS – Institut für Wohnungswesen, Immobilienwirtschaft, Stadt- und Regionalentwicklung GmbH

inwis.de

65

InWIS GmbH is a German-based institute specializing in housing, real estate economics, and urban and regional development. The organization combines scientific research with practical consulting services, targeting housing companies, developers, municipalities, and other stakeholders in the real estate sector. Their offerings include market analyses, surveys, sustainability consulting, digital tools, and corporate advisory services. The website reflects a professional and well-established entity with a clear market position and strategic partnerships. Technically, the site is built on TYPO3 CMS, uses modern front-end technologies, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. However, explicit security policies and incident response information are not publicly available. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

D

Deutsches Institut für Urbane Transformation

diut.de

41

The Deutsches Institut für Urbane Transformation (DIUT) is an independent research and think tank affiliated with the EBZ Business School, focusing on urban transformation and innovative neighborhood development primarily in the Ruhr region and North Rhine-Westphalia, Germany. The institute serves as a collaborative platform connecting academia, municipalities, businesses, and policymakers to address social, economic, and ecological challenges in urban areas. The website presents professional content with a clear focus on its mission and services but lacks explicit privacy and security policies. Technically, the site is built on WordPress with modern plugins and analytics tools, offering good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent but could be improved by publishing formal security and incident response policies.

M

Microsoft

cloud.microsoft

80

Microsoft 365 Copilot is a product offering from Microsoft Corporation, a leading global technology enterprise founded in 1975. The website serves as a sign-in and informational portal for Microsoft 365 Copilot, an AI-powered productivity assistant integrated with Microsoft 365 applications such as Word, Excel, and PowerPoint. The site targets both individual users and business customers, reflecting Microsoft's broad market reach and subscription-based SaaS business model. The website is professionally designed with consistent branding and clear navigation, optimized for mobile and desktop platforms.

The Europäisches Bildungszentrum der Wohnungs- und Immobilienwirtschaft (EBZ) is a well-established educational institution in Germany specializing in training, further education, and research for the housing and real estate industry. The website reflects a professional and comprehensive digital presence, offering a wide range of educational services including vocational training, business school programs, personal development, and research consultancy. The institution targets professionals and students in the real estate sector, positioning itself as a leading educational provider in this niche. Technically, the website is built on TYPO3 CMS with modern web technologies such as Bootstrap and integrates privacy-conscious analytics (Matomo) and bot protection (FriendlyCaptcha). The site is mobile-optimized and includes accessibility features, demonstrating a mature digital infrastructure. The hosting is managed by a reputable provider with multiple nameservers, ensuring reliability. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no public security or incident response policies are published, indicating room for improvement in transparency and security posture. No vulnerabilities or suspicious content were found. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security readiness.

N

netzfactor GmbH

by.nf

47

netzfactor GmbH is a German technology company specializing in customized hardware and software solutions, including web development, mobile applications, media design, network services, consulting, and research projects. The company positions itself as a partner for businesses seeking innovative and tailored IT solutions, leveraging experience and creativity to deliver efficient results. Their market presence is regional with active engagement in research collaborations and community events. Technically, the website is built on TYPO3 CMS with additional JavaScript libraries such as MooTools and uses Matomo for privacy-conscious analytics. The site is mobile optimized, well-structured, and includes a comprehensive cookie consent mechanism. Hosting details are not explicitly stated but the domain uses custom nameservers. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and employs privacy-friendly analytics with cookie disabling. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a detailed privacy policy and cookie consent banner. Business credibility is supported by clear company information, social media presence, and professional content. Overall, the website is trustworthy, professional, and compliant with GDPR. Strategic improvements include adding security headers, publishing security policies, and enhancing accessibility. The risk level is low with no critical issues detected.

W

WirtschaftsEntwicklungsGesellschaft Bochum mbH

parken-in-bochum.de

45

The website 'Parken in Bochum' is operated by the WirtschaftsEntwicklungsGesellschaft Bochum mbH and serves as an informational portal for parking facilities and services in the city of Bochum, Germany. It provides real-time parking availability, details on parking lots, parking ticket machines, and smart parking registration. The site targets residents and visitors seeking convenient parking solutions in Bochum. The business model is focused on public service and parking management, positioning itself as a key local resource for transportation-related information. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Swiper, Popper.js, and Tippy.js, along with Google Maps API integration for interactive maps. The site is mobile-optimized, accessible, and includes SEO best practices. It employs Matomo analytics with a cookie consent mechanism, reflecting a commitment to privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent. However, it lacks explicit security headers and does not publish a security policy or incident response contact details. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and legitimate, supporting trustworthiness. Overall, the website is professional, trustworthy, and provides valuable services to its audience. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

W

Wirtschaftsförderung Bochum WiFö GmbH

bochum-startup.de

47

Bochum Startup is a regional economic development initiative operated by Wirtschaftsförderung Bochum WiFö GmbH, focused on supporting startup founders and entrepreneurs in Bochum, Germany. The website offers comprehensive services including consulting, workshops, community events, and growth programs such as the WERK X incubator. The organization positions itself as a trusted partner throughout the startup journey, emphasizing competence, community, and regional focus. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Swiper, and Featherlight for interactive features. It employs Matomo analytics for privacy-conscious user tracking and integrates Google reCAPTCHA for form security. The site is mobile-optimized, accessible, and performs moderately well, with a consistent and professional design. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's business claims, indicating a legitimate and trustworthy domain. Overall, Bochum Startup presents a professional, secure, and privacy-conscious online presence suitable for its public sector economic development role. Strategic improvements could include adding formal security policies and enhancing security headers to further strengthen its security posture.

P

PrivacyBee

privacybee.io

53

PrivacyBee is a specialized technology company providing an automated privacy policy generation service tailored for small and medium-sized enterprises, primarily in the German-speaking market. The service emphasizes legal compliance with GDPR and Swiss data protection laws, offering automatic updates every 8 weeks and integration with popular CMS platforms. The website is professionally designed, content-rich, and optimized for user experience and SEO, reflecting a mature digital presence. Technically, the site leverages WordPress with modern plugins and tracking tools, maintaining good performance and mobile responsiveness. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit incident response information are absent. WHOIS data is privacy-protected, which aligns with the company's privacy-centric business model and does not raise immediate legitimacy concerns. Overall, PrivacyBee presents a trustworthy and professional service with a clear market focus and strong legal backing.

A

Atlassian

trello.com

75

Trello, a product of Atlassian, is a well-established productivity and project management platform founded in 2004. It offers a comprehensive suite of tools including Inbox, Boards, Planner, Automation, and Power-Ups to help teams organize and manage tasks efficiently. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site leverages modern frameworks like React, is hosted on AWS, and integrates security and privacy tools such as OneTrust and Google reCAPTCHA. Security posture is strong with HTTPS enforcement, security headers, and domain registration protections, although DNSSEC is not enabled. Privacy compliance is robust with clear policies and consent mechanisms. Overall, Trello's website demonstrates high professionalism, trustworthiness, and technical maturity.

Changelogfy is a Brazilian SaaS company founded in 2018 that provides an all-in-one platform for product teams to collect user feedback, manage changelogs, build product roadmaps, and offer knowledge base support. The platform targets product, marketing, and support teams aiming to improve product impact and customer engagement. The website demonstrates a modern, professional design with multilingual support and AI-powered features enhancing user experience and content creation. Technically, the site is built on Nuxt.js and Vue.js frameworks, hosted and registered via Cloudflare, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and explicit security headers are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and positioned as a competitive player in the product feedback SaaS market.

D

DP Wired

dp-wired.de

56

DP Wired is a small digital agency based in Germany specializing in web development, e-commerce solutions, and online branding. The company leverages modern technologies such as TYPO3 CMS, Laravel, Shopware, and Shopify to deliver tailored digital experiences. Their service portfolio includes web design, responsive development, SEO/SEA, plugin development, web hosting, and social media marketing, targeting businesses primarily in the Thüringen region. The website demonstrates a high level of professionalism with comprehensive service descriptions, active blog content, and consistent branding across social media platforms. Technically, the site is built on TYPO3 CMS with integrations of Google Tag Manager and Analytics, ensuring good SEO and performance optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

B

B im Beckmannshof

b-im-beckmannshof.de

44

B im Beckmannshof is a small hospitality business operating a restaurant and event venue in Germany, specializing in regional and reinterpreted German cuisine. The website is professionally designed using WordPress and Elementor, featuring a modern and responsive layout with clear navigation. The business targets local and regional customers seeking dining and event rental services. Technically, the site uses a standard WordPress stack with popular plugins and libraries such as JetEngine, Swiper.js, and Matomo for analytics, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent management, but lacks explicit security headers and published security policies. No contact emails or phone numbers were found in the provided content, which may impact user trust and business credibility. Overall, the website is functional and professional but could improve in privacy transparency and security best practices.

A

Akademisches Förderungswerk, A. ö. R.

q-we.st

47

Q-West Bochum is a campus gastronomy service operated by the Akademisches Förderungswerk, serving students and staff at Ruhr-Universität Bochum. The website presents a clear business model focused on providing lunch, dinner, coffee, and snacks with special pricing for students and apprentices. The business is positioned as a medium-sized hospitality service embedded within an educational environment, emphasizing quality, variety, and convenience. Technically, the site uses WordPress CMS with jQuery and Matomo analytics, providing a moderate performance and good mobile optimization. The presence of an OpenTable reservation widget enhances user experience. Security posture is adequate with HTTPS and privacy-conscious analytics, but lacks advanced security headers and formal security policies. Privacy compliance is good with a GDPR-compliant privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its target audience and business goals.